Compare commits
11 Commits
6471998a46
..
main
| Author | SHA1 | Date | |
|---|---|---|---|
| e1a16e6f1d | |||
| 4e2ab5b0da | |||
| cb7d872b34 | |||
| 1b696d4cb7 | |||
| be26f6eb47 | |||
| eed57dad2f | |||
| 22c37748e3 | |||
| 2ddaa79706 | |||
| 79f4caf9dd | |||
| 9a0b7e951d | |||
| 69c13606df |
@@ -3,3 +3,4 @@ logs/*
|
||||
scratch*
|
||||
*.bak*
|
||||
*.old*
|
||||
*tmp*
|
||||
|
||||
@@ -0,0 +1,4 @@
|
||||
AuthUserFile /etc/apache2/.htpasswd
|
||||
AuthType Basic
|
||||
AuthName "My restricted Area"
|
||||
Require valid-user
|
||||
@@ -6,3 +6,8 @@ add alias to .zshrc or .basrc
|
||||
|
||||
manuual
|
||||
`nmap -oX /var/www/html/nmaprincesspi/scans/FILENMAME.xml --stylesheet /nmaprincesspi/xsl/princesspi-nmap.xsl`
|
||||
|
||||
Designed to run on apache2 and php
|
||||
|
||||
need to make a .htpasswd file and put it somewhere
|
||||
https://www.web2generators.com/apache-tools/htpasswd-generator
|
||||
@@ -19,3 +19,9 @@ v0.5-dev
|
||||
added csrf protection
|
||||
bug fixes
|
||||
layout improvements
|
||||
|
||||
v0.6-dev
|
||||
added basic html auth (apache2)
|
||||
cleaned up code
|
||||
added nmap reference link
|
||||
open xml and nmap reference links in new tab
|
||||
@@ -26,6 +26,12 @@ body {
|
||||
background-repeat: no-repeat;
|
||||
}
|
||||
|
||||
#stickymenu {
|
||||
position: fixed;
|
||||
right: 0;
|
||||
bottom: 0;
|
||||
}
|
||||
|
||||
h1.title {
|
||||
color: #800080;
|
||||
font-size: 3em;
|
||||
|
||||
@@ -2,7 +2,7 @@ version: '3.8'
|
||||
services:
|
||||
# Apache and PHP service
|
||||
web:
|
||||
image: php:8-apache
|
||||
image: php:8.3.21-apache
|
||||
container_name: php-apache-container
|
||||
ports:
|
||||
- "${WWW_PORT_HOST}:80"
|
||||
|
||||
@@ -16,18 +16,21 @@ foreach($scans as $scan) {
|
||||
<link rel="stylesheet" href="css/nmaprincesspi.css">
|
||||
<script src="js/nmaprincesspi.js"></script>
|
||||
<link rel="icon" type="css/img/" href="css/img/favicon.ico">
|
||||
<title>Princess Pi's Magical Nmapprincesspi Thingy!</title>
|
||||
<title>Princess Pi's Magical Nmaprincesspi!</title>
|
||||
</head>
|
||||
<body>
|
||||
<h1>Princess Pi's Magical Nmapprincesspi Thingy!</h1>
|
||||
<label for="nmapcmd">nmap command</label>
|
||||
<h1>Princess Pi's Magical Nmaprincesspi!</h1>
|
||||
<a name="top"> </a>
|
||||
<br>
|
||||
<form id="cmdform">
|
||||
<label for="nmapcmd">nmap command</label>
|
||||
<input type="text" id="nmapcmd" name="nmapcmd">
|
||||
<input type="hidden" name="nonce" id="nonce" value="<?php echo $nonce; ?>">
|
||||
<input type="button" onclick="runNmapScan()" value="Go, Baby, Go!">
|
||||
<input type="submit" value="Go, Baby, Go!">
|
||||
</form>
|
||||
<br>
|
||||
<br>
|
||||
<span class="fakelink" id="showlist" onclick="toggleShow('scanlist', 'showlist', 'Hide Previous Scans', 'Show Previous Scans')">Show Previous Scans</span>
|
||||
<span class="fakelink" id="showlist">Show Previous Scans</span> | <a href="https://nmap.org/book/man.html" target="_blank">Nmap Reference</a>
|
||||
<br><br>
|
||||
<p class="hidden" id="link"></p>
|
||||
<div id="scanlist" class="hidden">
|
||||
@@ -38,5 +41,9 @@ foreach($scans as $scan) {
|
||||
<p>Progress<br>
|
||||
<pre id="progressbox"></pre>
|
||||
</div>
|
||||
<div id="stickymenu">
|
||||
<a href="#top">Top</a> | <a href="#bottom">Bottom</a>
|
||||
</div>
|
||||
<a name="bottom"> </a>
|
||||
</body>
|
||||
</html>
|
||||
+22
-9
@@ -11,25 +11,24 @@ function getID(ID) {
|
||||
|
||||
function toggleShow(ID, htmlUpdateID=false, htmlUpdateShowing=false, htmlUpdateHidden=false) {
|
||||
let elemClasses = getID(ID).classList;
|
||||
var updating = false;
|
||||
|
||||
if(htmlUpdateID !== false && htmlUpdateShowing !== false && htmlUpdateHidden !== false) {
|
||||
const updating = true;
|
||||
updateElem = getID(htmlUpdateID).innerHTML;
|
||||
} else {
|
||||
const updating = false;
|
||||
updating = true;
|
||||
var updateElem = getID(htmlUpdateID);
|
||||
}
|
||||
|
||||
if(elemClasses.contains('hidden')) {
|
||||
elemClasses.remove('hidden');
|
||||
|
||||
if(updating) {
|
||||
updateElem = htmlUpdateShowing;
|
||||
if(updating === true) {
|
||||
updateElem.innerHTML = htmlUpdateShowing;
|
||||
}
|
||||
} else {
|
||||
elemClasses.add('hidden');
|
||||
|
||||
if(updating) {
|
||||
updateElem = htmlUpdateHidden;
|
||||
if(updating === true) {
|
||||
updateElem.innerHTML = htmlUpdateHidden;
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -104,7 +103,7 @@ function xhrRunNmapScan(xhrRet) {
|
||||
clearInterval(pollInterval);
|
||||
}
|
||||
|
||||
getID('link').innerHTML = '<a href="'+xhrJson.webName+'">Scan Report ('+xhrJson.webName+')</a>';
|
||||
getID('link').innerHTML = '<a href="'+xhrJson.webName+'" target="_blank">Scan Report ('+xhrJson.webName+')</a>';
|
||||
getID('link').style.display = "inline";
|
||||
|
||||
getID('progressbox').innerHTML = '';
|
||||
@@ -133,3 +132,17 @@ function runNmapScan() {
|
||||
doXhr('run_scan.php', xhrRunNmapScan, 'POST', postData);
|
||||
}
|
||||
|
||||
/* listeners */
|
||||
window.onload = function() {
|
||||
let cmdform = getID('cmdform');
|
||||
let showlist = getID('showlist');
|
||||
|
||||
cmdform.addEventListener('submit', function(event) {
|
||||
event.preventDefault(); // prevents loading new page
|
||||
runNmapScan();
|
||||
});
|
||||
|
||||
showlist.addEventListener('click', function(event) {
|
||||
toggleShow('scanlist', 'showlist', 'Hide Previous Scans', 'Show Previous Scans');
|
||||
});
|
||||
}
|
||||
+1
-1
@@ -13,7 +13,7 @@
|
||||
}
|
||||
|
||||
$file_name = date("Ymd-Hi-s") . "-" . rand(1000000,9999999) . ".xml";
|
||||
$run_cmd = "bash ./scripts/run_scan.sh nmap -oX ./scans/$file_name --stylesheet /nmaprincesspi/xsl/princesspi-nmap.xsl $post_cmd";
|
||||
$run_cmd = "bash ./scripts/run_scan.sh nmap -oX ./scans/$file_name --stylesheet REPLACEMEFILLYFILLYFILLY $post_cmd";
|
||||
$web_name = "/nmaprincesspi/scans/$file_name";
|
||||
|
||||
$exec = trim(shell_exec($run_cmd));
|
||||
|
||||
@@ -7,19 +7,25 @@ x bug on second scan in progress pre
|
||||
error handling
|
||||
nmap fail
|
||||
php script fail
|
||||
input validation fail
|
||||
containerize
|
||||
x input validation fail
|
||||
x csrf validation fail
|
||||
xhr fail
|
||||
"finished" notification by parsing xml for end bits
|
||||
keep alive check with ps aux type thingggg
|
||||
x scans listing
|
||||
x clear scans buttons
|
||||
x work on scans filename?
|
||||
fix perms
|
||||
auth system
|
||||
x auth system
|
||||
input/output validation
|
||||
x escapeshellcmd
|
||||
layout
|
||||
collums
|
||||
do not show scan list text when empty
|
||||
figure out some kinda command ran for anchor text on previous scans
|
||||
by parsing xml fmmmm
|
||||
autoscroll
|
||||
floating "top" button
|
||||
work on princesspi-nmap.xsl
|
||||
clean up
|
||||
minimize stuff
|
||||
@@ -28,3 +34,9 @@ work on princesspi-nmap.xsl
|
||||
green class
|
||||
padding on table items
|
||||
centering text on table headers
|
||||
containerize
|
||||
nmap docker?
|
||||
perms?
|
||||
script with sticky bit?
|
||||
custom docker?
|
||||
docker inside docker?
|
||||
+1
-1
@@ -1 +1 @@
|
||||
v0.5-dev
|
||||
v0.6-dev
|
||||
@@ -65,14 +65,6 @@
|
||||
<xsl:comment>generated with nmap.xsl - version <xsl:value-of select="$nmap_xsl_version" /> by Benjamin Erb - http://www.benjamin-erb.de/nmap_xsl.php </xsl:comment>
|
||||
|
||||
<style type="text/css">
|
||||
|
||||
@font-face {
|
||||
font-family: "Comic-Code-Regular";
|
||||
src: url("/nmaprincesspi/css/fonts/Comic-Code-Regular.ttf"),
|
||||
url("/nmaprincesspi/css/fonts/Comic-Code-Regular.woff"),
|
||||
url("/nmaprincesspi/css/fonts/Comic-Code-Regular.otf");
|
||||
}
|
||||
|
||||
/* stylesheet print */
|
||||
@media print
|
||||
{
|
||||
@@ -81,56 +73,55 @@
|
||||
}
|
||||
|
||||
body {
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
background-color: #FFDDDD;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
}
|
||||
|
||||
h1 {
|
||||
font-size: 13pt;
|
||||
font-weight: bold;
|
||||
margin: 4pt 0 0 0;
|
||||
padding: 0;
|
||||
font-weight:bold;
|
||||
margin:4pt 0pt 0pt 0pt;
|
||||
padding:0;
|
||||
}
|
||||
|
||||
h2 {
|
||||
font-size: 12pt;
|
||||
font-weight: bold;
|
||||
margin: 3pt 0 0 0p
|
||||
padding: 0;
|
||||
font-weight:bold;
|
||||
margin:3pt 0pt 0pt 0pt;
|
||||
padding:0;
|
||||
}
|
||||
|
||||
h3, a:link, a:visited {
|
||||
font-size: 9pt;
|
||||
font-weight: bold;
|
||||
margin: 1pt 0 0 20pt;
|
||||
padding: 0;
|
||||
font-weight:bold;
|
||||
margin:1pt 0pt 0pt 20pt;
|
||||
padding:0;
|
||||
text-decoration: none;
|
||||
color: #800080;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
p,ul {
|
||||
font-size: 9pt;
|
||||
margin: 1pt 0 8pt 40pt;
|
||||
padding: 0;
|
||||
text-align: left;
|
||||
margin:1pt 0pt 8pt 40pt;
|
||||
padding:0;
|
||||
text-align:left;
|
||||
}
|
||||
|
||||
li {
|
||||
font-size: 9pt;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
text-align: left;
|
||||
margin:0;
|
||||
padding:0;
|
||||
text-align:left;
|
||||
}
|
||||
|
||||
table {
|
||||
margin:1pt 0pt 8pt 40pt;
|
||||
border: 0;
|
||||
width: 90%
|
||||
border:0px;
|
||||
width:90%
|
||||
}
|
||||
|
||||
td {
|
||||
border: 0;
|
||||
border-top: 1px solid #FFB4C0;
|
||||
border:0px;
|
||||
border-top:1px solid black;
|
||||
font-size: 9pt;
|
||||
}
|
||||
|
||||
@@ -146,109 +137,109 @@
|
||||
@media screen
|
||||
{
|
||||
body {
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
background-image: url('/nmaprincesspi/css/img/princesspi-large-alpha-transparency-more-faded.png');
|
||||
background-repeat: no-repeat;
|
||||
background-color: #FFDDDD;
|
||||
margin: 0;
|
||||
color: #800080;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
margin: 0px;
|
||||
background-color: #FFFFFF;
|
||||
color: #000000;
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
#container {
|
||||
text-align: left;
|
||||
text-align:left;
|
||||
margin: 10px auto;
|
||||
width: 90%;
|
||||
}
|
||||
|
||||
h1 {
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-weight: bold;
|
||||
font-size: 2em;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
margin: 10px 0 0 0;
|
||||
padding: 5px 4px 5px 4px;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-weight:bold;
|
||||
font-size: 14pt;
|
||||
color: #FFFFFF;
|
||||
background-color:#2A0D45;
|
||||
margin:10px 0px 0px 0px;
|
||||
padding:5px 4px 5px 4px;
|
||||
width: 100%;
|
||||
border:1px solid #FFB4C0;
|
||||
border:1px solid black;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
h2 {
|
||||
font-family: "Comic-Code-Regular","Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-weight:bold;
|
||||
font-size: 1.7em;
|
||||
color: #800080;
|
||||
font-size: 11pt;
|
||||
color: #000000;
|
||||
margin:30px 0px 0px 0px;
|
||||
padding:4px;
|
||||
width: 100%;
|
||||
background-color: #FFB4C0;
|
||||
background-color:#F0F8FF;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
h2.green {
|
||||
color: #800080;
|
||||
background-color: #FFEEEE;
|
||||
border-color: #800080;
|
||||
color: #000000;
|
||||
background-color:#CCFFCC;
|
||||
border-color:#006400;
|
||||
}
|
||||
|
||||
h2.red {
|
||||
color: #800080;
|
||||
background-color: #FFCCCC;
|
||||
border-color: #800080;
|
||||
color: #000000;
|
||||
background-color:#FFCCCC;
|
||||
border-color:#8B0000;
|
||||
}
|
||||
|
||||
h3 {
|
||||
font-family: "Comic-Code-Regular","Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-weight:bold;
|
||||
font-size: 1.5em;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
font-size: 10pt;
|
||||
color:#000000;
|
||||
background-color: #FFFFFF;
|
||||
width: 75%;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
p {
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-size: 1em;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-size: 8pt;
|
||||
color:#000000;
|
||||
background-color: #FFFFFF;
|
||||
width: 75%;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
p i {
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-size: 1em;
|
||||
color: #800080;
|
||||
background-color: #FFEEEE;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-size: 8pt;
|
||||
color:#000000;
|
||||
background-color: #CCCCCC;
|
||||
}
|
||||
|
||||
ul {
|
||||
font-family: "Comic-Code-Regular","Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-size: 1em;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-size: 8pt;
|
||||
color:#000000;
|
||||
background-color: #FFFFFF;
|
||||
width: 75%;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
a {
|
||||
font-family: "Comic-Code-Regular","Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
text-decoration: none;
|
||||
font-size: 1em;
|
||||
font-weight: bold;
|
||||
background-color: #FFB4C0;
|
||||
color: #800080;
|
||||
font-size: 8pt;
|
||||
color:#000000;
|
||||
font-weight:bold;
|
||||
background-color: #FFFFFF;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
li a {
|
||||
font-family: "Comic-Code-Regular","Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
text-decoration: none;
|
||||
font-size: 1em;
|
||||
font-weight: bold;
|
||||
background-color: #FFB4C0;
|
||||
color: #800080;
|
||||
font-size: 10pt;
|
||||
color:#000000;
|
||||
font-weight:bold;
|
||||
background-color: #FFFFFF;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
a:hover {
|
||||
@@ -256,77 +247,96 @@
|
||||
}
|
||||
|
||||
a.up {
|
||||
color: #800080;
|
||||
color:#006400;
|
||||
}
|
||||
|
||||
table {
|
||||
width: 80%;
|
||||
border: 0;
|
||||
margin: 10px;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
border:0px;
|
||||
color: #000000;
|
||||
background-color: #000000;
|
||||
margin:10px;
|
||||
}
|
||||
|
||||
tr {
|
||||
vertical-align:top;
|
||||
font-family: "Comic-Code-Regular", "Comic Sans MS", "Comic Sans", sans-serif;
|
||||
font-size: 1em;
|
||||
color: #800080;
|
||||
background-color: #FFB4C0;
|
||||
font-family: Verdana, Helvetica, sans-serif;
|
||||
font-size: 8pt;
|
||||
color:#000000;
|
||||
background-color: #FFFFFF;
|
||||
}
|
||||
|
||||
tr.head {
|
||||
background-color: #FFEEEE;
|
||||
color: #800080;
|
||||
font-weight: bold;
|
||||
background-color: #E1E1E1;
|
||||
color: #000000;
|
||||
font-weight:bold;
|
||||
}
|
||||
|
||||
tr.open {
|
||||
background-color: #FFEEEE;
|
||||
color: #800080;
|
||||
background-color: #CCFFCC;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
tr.script {
|
||||
background-color: #FFDDDD;
|
||||
color: #800080;
|
||||
background-color: #EFFFF7;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
tr.filtered {
|
||||
background-color: #FFDDDD;
|
||||
color: #800080;
|
||||
background-color: #F2F2F2;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
tr.closed {
|
||||
background-color: #FFDDDD;
|
||||
color: #800080;
|
||||
background-color: #F2F2F2;
|
||||
color: #000000;
|
||||
}
|
||||
|
||||
td {
|
||||
padding: 2px;
|
||||
padding:2px;
|
||||
}
|
||||
|
||||
#menu li {
|
||||
display: inline;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style-type: none;
|
||||
display : inline;
|
||||
margin : 0;
|
||||
/*margin-right : 10px;*/
|
||||
padding : 0;
|
||||
list-style-type : none;
|
||||
}
|
||||
|
||||
#menubox {
|
||||
position: fixed;
|
||||
bottom: 0;
|
||||
right: 0;
|
||||
bottom: 0px;
|
||||
right: 0px;
|
||||
width: 120px;
|
||||
}
|
||||
|
||||
|
||||
<![CDATA[
|
||||
/* This section handle's IE's refusal to honor the fixed CSS attribute */
|
||||
|
||||
* html div#menubox {
|
||||
position: absolute;
|
||||
top:expression(eval(
|
||||
document.compatMode && document.compatMode=='CSS1Compat') ?
|
||||
documentElement.scrollTop+(documentElement.clientHeight-this.clientHeight)
|
||||
: document.body.scrollTop +(document.body.clientHeight-this.clientHeight));
|
||||
}
|
||||
/* This fixes the jerky effect when scrolling in IE*/
|
||||
* html,* html body {
|
||||
background: #fff url(nosuchfile) fixed;
|
||||
}
|
||||
|
||||
]]>
|
||||
|
||||
.up {
|
||||
color: #800080;
|
||||
background-color: #FFEEEE;
|
||||
color: #000000;
|
||||
background-color:#CCFFCC;
|
||||
}
|
||||
|
||||
.down {
|
||||
color: #800080;
|
||||
background-color: #FFEEEE;
|
||||
color:#626262;
|
||||
background-color: #F2F2F2;
|
||||
}
|
||||
|
||||
.print_only { display: none; }
|
||||
@@ -336,9 +346,8 @@
|
||||
}
|
||||
</style>
|
||||
|
||||
<title>Princess Pi's Magical Nmap Scan Report! - Scanned at <xsl:value-of select="$start" /></title>
|
||||
|
||||
<link rel="icon" type="image/x-icon" href="/nmaprincesspi/css/img/favicon.ico" />
|
||||
<title>Nmap Scan Report - Scanned at <xsl:value-of select="$start" /></title>
|
||||
<link rel="icon" href="https://h.acker.is/nmaprincesspi/img/favicon.ico" type="image/x-icon" />
|
||||
|
||||
<script type="text/javascript">
|
||||
|
||||
@@ -389,7 +398,7 @@
|
||||
<a name="top" />
|
||||
<div id="container">
|
||||
|
||||
<h1>Princess Pi's Magical Nmap Scan Report! - Scanned at <xsl:value-of select="$start" /></h1>
|
||||
<h1>Nmap Scan Report - Scanned at <xsl:value-of select="$start" /></h1>
|
||||
|
||||
<ul id="menu">
|
||||
<li><a href="#scansummary">Scan Summary</a></li>
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user