Re: Use logs from nmap

From: Spurge (spurgeonbj_at_softhome.net)
Date: 07/06/04

  • Next message: Paul Kurczaba: "Re: How to get rid of two trojans" 
    To: security-basics@securityfocus.com
Date: Tue, 6 Jul 2004 19:19:23 +0530

    Hi,

    > Anything could said me, any tool for see the ie: nmap's logs in xml,text
    > and can cut the columns that i want, or make operations with this?

    This had figured in SF's pentest list recently and Bill Z. <bgk@hotunix.com>
    had given a wonderful snippet to do that. Here's what
    was suggested and I've tried it out and find it very useful.

    ----snip----
    echo '<table>' >nmap.xls; grep ^[0-9] nmap.out | tr '/' ' ' |
    awk'{printf("<tr><td>%s</td><td>%s</td><td>%s</td><td>%s</td></tr>\n",$2,$1,
    $3,$4);}' >> nmap.xls; echo '</table>' >> nmap.xls
    ----snip----

    here's how this goes:
    0. Put the table tag in the outputfile.
    1. Filter the port data of nmap thru grep and pipe it to next.
    2. Replace the slash between the port no and protocol in col 1 with a space
    to make the output as 4 fields (port no, protocol, state and service) and
    pipe to next.
    3. awk does the rest of separating fields and prepending and appending HTML
    tags around each field and append the lines to outputfile
    4. finish off the outputfile by appending ending tag for the table.

    this saves nmap result as an excel spreadsheet, which you can further export
    into various DB formats, sort etc... The same approach can be made to parse
    any format you deem fit... If you are determined ;-)

    Regards
    Spurge

    ---------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
    any course! All of our class sizes are guaranteed to be 10 students or less
    to facilitate one-on-one interaction with one of our expert instructors.
    Attend a course taught by an expert instructor with years of in-the-field
    pen testing experience in our state of the art hacking lab. Master the skills
    of an Ethical Hacker to better assess the security of your organization.
    Visit us at:
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    ----------------------------------------------------------------------------

  • Next message: Paul Kurczaba: "Re: How to get rid of two trojans"

    Relevant Pages

    • RE: Removing Local Admin Rights...
      ... Ethical Hacking at the InfoSec Institute. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ... pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: HIPAA_Compliance
      ... Ethical Hacking at the InfoSec Institute. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ... pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: Cisco CSA
      ... Ethical Hacking at the InfoSec Institute. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ... pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: Minimum password requirements
      ... Ethical Hacking at the InfoSec Institute. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ... pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • Betr.: RE: fax software in the domain
      ... Ethical Hacking at the InfoSec Institute. ... to facilitate one-on-one interaction with one of our expert instructors. ... pen testing experience in our state of the art hacking lab. ... Attend a course taught by an expert instructor with years of in-the-field ...
      (Security-Basics)