Playing with nmap xml output

[Martin Holst Swende <martin () swende se>]

Hi list,

I didn't find a really good way to handle nmap output for larger scans,
usually I ended up importing output into a spreadsheet to do sorting and
filtering and stuff. To make my life easier, I instead wrote a
one-page-app which fetches a nmap output xml file via XHR and allows you
to do all these things on a webpage.

Some info:
- Based on datatables (www.datatables.net) and jquery, mustache.js,
icanhaz.js
- No server side logic, all clientside
- Project does contain a python script to start a local webserver on
127.0.0.1:8000 in order to serve files
- Due to the XHR, the page must be served from a webserver, local files
does not allow XHR
- Due to SOP, the nmap output must reside on the server which hosts the
page (or on a subdomain)
- Can do export into csv, pdf and 'print-view'
- Does filtering by individual fields or all
- Does sorting
- You can specify what fields you want to view (show/hide columns), and
if script output is displayed inline or on a separate row.

Since there is no active server involved, you can actually test it
directly on bitbucket*:

https://bitbucket.org/holiman/nmap-onepage/raw/tip/index.html

*although on bitbucket, the flash-things which does pdf export and stuff
seems not to work. Haven't looked into why yet.

By default, it loads a file called sample-random1000.xml which is a
random scan. If you want to try it out yourselves with your own data,
just do
~/tmp$ hg clone http://bitbucket.org/holiman/nmap-onepage
~/tmp$ cd nmap-onepage/
~/tmp/nmap-onepage$ ./server.sh

And then place an output file in the nmap-onepage directory and load it.
Feedback is appreciated!
Regards,
Martin Holst Swende


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/