PrincessPi/nmaprincesspi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: PrincessPi/nmaprincesspi:6471998a46234b9202910aef191b7df36c8aed59
Branches Tags
PrincessPi/nmaprincesspi:main
...
compare: PrincessPi/nmaprincesspi:4e2ab5b0da3324ba9b6ae1d969c6f303d51c0403
Branches Tags
PrincessPi/nmaprincesspi:main

10 Commits
6471998a46 ... 4e2ab5b0da

Author SHA1 Message Date
PrincessPi 4e2ab5b0da migration 2026-05-26 20:51:40 -06:00
PrincessPi cb7d872b34 sorry dude i learned all my sex moves in china, you can not defeat me 2026-02-26 19:39:37 -07:00
PrincessPi 1b696d4cb7 initial commit via gitinitshit 2026-02-26 19:35:58 -07:00
PrincessPi be26f6eb47 v0.6-dev 2025-08-09 06:30:56 -06:00
PrincessPi eed57dad2f v0.6-dev 2025-08-09 06:27:18 -06:00
PrincessPi 22c37748e3 wooo 2025-06-07 16:04:20 -06:00
PrincessPi 2ddaa79706 v0.6-dev 2025-05-15 21:13:59 -06:00
PrincessPi 79f4caf9dd v0.5-dev 2025-05-15 19:45:27 -06:00
PrincessPi 9a0b7e951d v0.5-dev 2025-05-15 19:44:40 -06:00
PrincessPi 69c13606df v0.5-dev 2025-05-15 19:32:35 -06:00
16 changed files with 2215 additions and 27 deletions
Expand all files Collapse all files
.gitignore
+1
View File
@@ -3,3 +3,4 @@ logs/*
scratch* scratch*
*.bak* *.bak*
*.old* *.old*
*tmp*
.htaccess
+4
View File
@@ -0,0 +1,4 @@
AuthUserFile /etc/apache2/.htpasswd
AuthType Basic
AuthName "My restricted Area"
Require valid-user
README.md
+6 -1
View File
@@ -5,4 +5,9 @@ add alias to .zshrc or .basrc
`alias nmap="/var/www/html/nmaprincesspi/nmap-script.sh"` `alias nmap="/var/www/html/nmaprincesspi/nmap-script.sh"`
manuual manuual
`nmap -oX /var/www/html/nmaprincesspi/scans/FILENMAME.xml --stylesheet /nmaprincesspi/xsl/princesspi-nmap.xsl` `nmap -oX /var/www/html/nmaprincesspi/scans/FILENMAME.xml --stylesheet /nmaprincesspi/xsl/princesspi-nmap.xsl`
Designed to run on apache2 and php
need to make a .htpasswd file and put it somewhere
https://www.web2generators.com/apache-tools/htpasswd-generator
changelog.txt
+7 -1
View File
@@ -18,4 +18,10 @@ v0.4-dev
v0.5-dev v0.5-dev
added csrf protection added csrf protection
bug fixes bug fixes
layout improvements layout improvements
v0.6-dev
added basic html auth (apache2)
cleaned up code
added nmap reference link
open xml and nmap reference links in new tab
css/nmaprincesspi.css
+6
View File
@@ -26,6 +26,12 @@ body {
background-repeat: no-repeat; background-repeat: no-repeat;
} }
#stickymenu {
position: fixed;
right: 0;
bottom: 0;
}
h1.title { h1.title {
color: #800080; color: #800080;
font-size: 3em; font-size: 3em;
docker-compose/docker-compose.yml
+1 -1
View File
@@ -2,7 +2,7 @@ version: '3.8'
services: services:
# Apache and PHP service # Apache and PHP service
web: web:
image: php:8-apache image: php:8.3.21-apache
container_name: php-apache-container container_name: php-apache-container
ports: ports:
- "${WWW_PORT_HOST}:80" - "${WWW_PORT_HOST}:80"
index.php
+14 -7
View File
@@ -16,18 +16,21 @@ foreach($scans as $scan) {
<link rel="stylesheet" href="css/nmaprincesspi.css"> <link rel="stylesheet" href="css/nmaprincesspi.css">
<script src="js/nmaprincesspi.js"></script> <script src="js/nmaprincesspi.js"></script>
<link rel="icon" type="css/img/" href="css/img/favicon.ico"> <link rel="icon" type="css/img/" href="css/img/favicon.ico">
<title>Princess Pi's Magical Nmapprincesspi Thingy!</title> <title>Princess Pi's Magical Nmaprincesspi!</title>
</head> </head>
<body> <body>
<h1>Princess Pi's Magical Nmapprincesspi Thingy!</h1> <h1>Princess Pi's Magical Nmaprincesspi!</h1>
<label for="nmapcmd">nmap command</label> <a name="top">&nbsp;</a>
<br> <br>
<input type="text" id="nmapcmd" name="nmapcmd"> <form id="cmdform">
<input type="hidden" name="nonce" id="nonce" value="<?php echo $nonce; ?>"> <label for="nmapcmd">nmap command</label>
<input type="button" onclick="runNmapScan()" value="Go, Baby, Go!"> <input type="text" id="nmapcmd" name="nmapcmd">
<input type="hidden" name="nonce" id="nonce" value="<?php echo $nonce; ?>">
<input type="submit" value="Go, Baby, Go!">
</form>
<br> <br>
<br> <br>
<span class="fakelink" id="showlist" onclick="toggleShow('scanlist', 'showlist', 'Hide Previous Scans', 'Show Previous Scans')">Show Previous Scans</span> <span class="fakelink" id="showlist">Show Previous Scans</span> | <a href="https://nmap.org/book/man.html" target="_blank">Nmap Reference</a>
<br><br> <br><br>
<p class="hidden" id="link"></p> <p class="hidden" id="link"></p>
<div id="scanlist" class="hidden"> <div id="scanlist" class="hidden">
@@ -38,5 +41,9 @@ foreach($scans as $scan) {
<p>Progress<br> <p>Progress<br>
<pre id="progressbox"></pre> <pre id="progressbox"></pre>
</div> </div>
<div id="stickymenu">
<a href="#top">Top</a> | <a href="#bottom">Bottom</a>
</div>
<a name="bottom">&nbsp;</a>
</body> </body>
</html> </html>
js/nmaprincesspi.js
+23 -10
View File
@@ -11,25 +11,24 @@ function getID(ID) {
function toggleShow(ID, htmlUpdateID=false, htmlUpdateShowing=false, htmlUpdateHidden=false) { function toggleShow(ID, htmlUpdateID=false, htmlUpdateShowing=false, htmlUpdateHidden=false) {
let elemClasses = getID(ID).classList; let elemClasses = getID(ID).classList;
var updating = false;
if(htmlUpdateID !== false && htmlUpdateShowing !== false && htmlUpdateHidden !== false) { if(htmlUpdateID !== false && htmlUpdateShowing !== false && htmlUpdateHidden !== false) {
const updating = true; updating = true;
updateElem = getID(htmlUpdateID).innerHTML; var updateElem = getID(htmlUpdateID);
} else { }
const updating = false;
}
if(elemClasses.contains('hidden')) { if(elemClasses.contains('hidden')) {
elemClasses.remove('hidden'); elemClasses.remove('hidden');
if(updating) { if(updating === true) {
updateElem = htmlUpdateShowing; updateElem.innerHTML = htmlUpdateShowing;
} }
} else { } else {
elemClasses.add('hidden'); elemClasses.add('hidden');
if(updating) { if(updating === true) {
updateElem = htmlUpdateHidden; updateElem.innerHTML = htmlUpdateHidden;
} }
} }
} }
@@ -104,7 +103,7 @@ function xhrRunNmapScan(xhrRet) {
clearInterval(pollInterval); clearInterval(pollInterval);
} }
getID('link').innerHTML = '<a href="'+xhrJson.webName+'">Scan Report ('+xhrJson.webName+')</a>'; getID('link').innerHTML = '<a href="'+xhrJson.webName+'" target="_blank">Scan Report ('+xhrJson.webName+')</a>';
getID('link').style.display = "inline"; getID('link').style.display = "inline";
getID('progressbox').innerHTML = ''; getID('progressbox').innerHTML = '';
@@ -133,3 +132,17 @@ function runNmapScan() {
doXhr('run_scan.php', xhrRunNmapScan, 'POST', postData); doXhr('run_scan.php', xhrRunNmapScan, 'POST', postData);
} }
/* listeners */
window.onload = function() {
let cmdform = getID('cmdform');
let showlist = getID('showlist');
cmdform.addEventListener('submit', function(event) {
event.preventDefault(); // prevents loading new page
runNmapScan();
});
showlist.addEventListener('click', function(event) {
toggleShow('scanlist', 'showlist', 'Hide Previous Scans', 'Show Previous Scans');
});
}
xsl/nmap.xsl → nmap.xsl
View File
run_scan.php
+2 -2
View File
@@ -13,9 +13,9 @@
} }
$file_name = date("Ymd-Hi-s") . "-" . rand(1000000,9999999) . ".xml"; $file_name = date("Ymd-Hi-s") . "-" . rand(1000000,9999999) . ".xml";
$run_cmd = "bash ./scripts/run_scan.sh nmap -oX ./scans/$file_name --stylesheet /nmaprincesspi/xsl/princesspi-nmap.xsl $post_cmd"; $run_cmd = "bash ./scripts/run_scan.sh nmap -oX ./scans/$file_name --stylesheet REPLACEMEFILLYFILLYFILLY $post_cmd";
$web_name = "/nmaprincesspi/scans/$file_name"; $web_name = "/nmaprincesspi/scans/$file_name";
$exec = trim(shell_exec($run_cmd)); $exec = trim(shell_exec($run_cmd));
echo "{\"runningLog\":\"$exec\",\"webName\":\"$web_name\"}"; echo "{\"runningLog\":\"$exec\",\"webName\":\"$web_name\"}";
?> ?>
todo.txt
+16 -4
View File
@@ -7,19 +7,25 @@ x bug on second scan in progress pre
error handling error handling
nmap fail nmap fail
php script fail php script fail
input validation fail x input validation fail
containerize x csrf validation fail
xhr fail
"finished" notification by parsing xml for end bits
keep alive check with ps aux type thingggg
x scans listing x scans listing
x clear scans buttons x clear scans buttons
x work on scans filename? x work on scans filename?
fix perms fix perms
auth system x auth system
input/output validation input/output validation
x escapeshellcmd x escapeshellcmd
layout layout
collums collums
do not show scan list text when empty do not show scan list text when empty
figure out some kinda command ran for anchor text on previous scans figure out some kinda command ran for anchor text on previous scans
by parsing xml fmmmm
autoscroll
floating "top" button
work on princesspi-nmap.xsl work on princesspi-nmap.xsl
clean up clean up
minimize stuff minimize stuff
@@ -27,4 +33,10 @@ work on princesspi-nmap.xsl
make prettier make prettier
green class green class
padding on table items padding on table items
centering text on table headers centering text on table headers
containerize
nmap docker?
perms?
script with sticky bit?
custom docker?
docker inside docker?
version.txt
+1 -1
View File
@@ -1 +1 @@
v0.5-dev v0.6-dev
xslt/nmap.xsl
+1071
View File
File diff suppressed because it is too large Load Diff
xslt/princesspi-nmap-base64-base64-data-url.xsl.b64
+1
View File
File diff suppressed because one or more lines are too long
xslt/princesspi-nmap-base64.xsl
+1062
View File
File diff suppressed because one or more lines are too long
xsl/princesspi-nmap.xsl → xslt/princesspi-nmap.xsl
View File