Nmap Development mailing list archives

[GSoC 2015] Ideas, thoughts


From: "s0h3ck ." <s0h3ck () gmail com>
Date: Fri, 6 Mar 2015 17:29:37 -0500

Dear mentors and Nmap's team,

I wonder if a tool who is able to tell you how many XML or HTML elements
are in a specific chosen web page could be interesting in Nmap's team?

In fact, this tool would be able to describe the hierarchy of the website
(DOM) by default. Then, with arguments supplied by the user, we could know
how many hidden elements are on the specific web page. For instance, some
websites has hidden input and he could be useful to know how many are
hidden on the website. Another amazing example could be to detect if your
web page implements news feature added from W3C. Furthermore, this tool
would have the ability to research a specific element by following the
search item as the first argument and specify additional arguments like the
minimum or the maximum elements before the script stops looking into the
source page and return results. The tool could be able to compare how many
counted element between website and another. In that way, it can be a great
opportunity to detect XSS, SQL and more.

What are your thoughts ?

Next, couple of questions :
1. Does Nmap has a terminal tutorial like vimtutor (Vim) ? If no, does
Nmap's team would be interest in it as part of the work in GSoC (for maybe
one or two week) ?
2. Does Nmap needs more french translations?  (I can give a boost maybe for
this summer ;))
3. In the proposal, do you recommend to write both the real name and the
pseudo or only the real name ?
4. Where is the sql-injection.html ?
http://nmap.org/nsedoc/scripts/sql-injection.html
Broken link : http://nmap.org/soc/#nsescripts

I hope you don't have too much questions :s
Thanks for your time, I really appreciate it.

Best regards,
s0h3ck.
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: