├── .github
    └── FUNDING.yml
├── README.md
├── docs
    ├── nmap_advanced_portscan.xml
    └── report.html
└── nmap-bootstrap.xsl


/.github/FUNDING.yml:
--------------------------------------------------------------------------------
1 | # These are supported funding model platforms
2 | 
3 | github: [l4rm4nd]
4 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | <div align="center" width="100%">
 2 |     <h1>nmap-bootstrap-xsl</h1>
 3 |     <p>An Nmap XSL implementation with Bootstrap.<br>Allows Nmap XML port scan results to be converted into beautiful HTML reports.</p><p>
 4 |     <a target="_blank" href="https://haxxnet.github.io/nmap-bootstrap-xsl/report.html">> Demo HTML Report <</a><p>
 5 |     <a target="_blank" href="https://github.com/l4rm4nd"><img src="https://img.shields.io/badge/maintainer-LRVT-orange" /></a>
 6 |     <a target="_blank" href="https://GitHub.com/Haxxnet/nmap-bootstrap-xsl/graphs/contributors/"><img src="https://img.shields.io/github/contributors/Haxxnet/nmap-bootstrap-xsl.svg" /></a><br>
 7 |     <a target="_blank" href="https://GitHub.com/Haxxnet/nmap-bootstrap-xsl/commits/"><img src="https://img.shields.io/github/last-commit/Haxxnet/nmap-bootstrap-xsl.svg" /></a>
 8 |     <a target="_blank" href="https://GitHub.com/Haxxnet/nmap-bootstrap-xsl/issues/"><img src="https://img.shields.io/github/issues/Haxxnet/nmap-bootstrap-xsl.svg" /></a>
 9 |     <a target="_blank" href="https://github.com/Haxxnet/nmap-bootstrap-xsl/issues?q=is%3Aissue+is%3Aclosed"><img src="https://img.shields.io/github/issues-closed/Haxxnet/nmap-bootstrap-xsl.svg" /></a><br>
10 |         <a target="_blank" href="https://github.com/Haxxnet/nmap-bootstrap-xsl/stargazers"><img src="https://img.shields.io/github/stars/Haxxnet/nmap-bootstrap-xsl.svg?style=social&label=Star" /></a>
11 |     <a target="_blank" href="https://github.com/Haxxnet/nmap-bootstrap-xsl/network/members"><img src="https://img.shields.io/github/forks/Haxxnet/nmap-bootstrap-xsl.svg?style=social&label=Fork" /></a>
12 |     <a target="_blank" href="https://github.com/Haxxnet/nmap-bootstrap-xsl/watchers"><img src="https://img.shields.io/github/watchers/Haxxnet/nmap-bootstrap-xsl.svg?style=social&label=Watch" /></a><p>
13 |     <a href="https://www.buymeacoffee.com/LRVT" target="_blank"><img src="https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png" alt="Buy Me A Coffee" style="height: 41px !important;width: 174px !important;box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;-webkit-box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;" ></a>
14 | </div>
15 | 
16 | ## 🔥 Features
17 | 
18 | - Bootstrap Datatable filters and search bars
19 | - Export functionality like Copy, CSV, Excel and PDF
20 | - Automatic classification of web network services to a separate audit space with clickable HTTP/HTTPS URLs
21 | - Nmap CLI flag explanation via https://explainshell.com
22 | - Dynamic keyword highlighting via JS (e.g. keywords like password, login, insecure)
23 | - Quick glance at HTTP titles and SSL certificate information (CN, Expiry etc.)
24 | - Hostname and IP address listing of scan targets
25 | - Indication for encrypted network services (plaintext vs. SSL/STARTTLS)
26 | - Links to 3rd party services such as a CVE database by Pentest Factory, an SSL scan service by Qualys and an HTTP security header scan service by securityheaders.com
27 |     
28 | ## ✨ Requirements
29 | - xsltproc — command line xslt processor
30 | 
31 | ````
32 | sudo apt install xsltproc
33 | ````
34 | 
35 | ## 🎓 Usage
36 | 
37 | ### Converting Nmap XML
38 | 
39 | You can convert an already existing Nmap XML file into a nicely formatted HTML report by executing the following commands:
40 | 
41 | ````
42 | # download the nmap bootstrap xsl
43 | wget https://raw.githubusercontent.com/Haxxnet/nmap-bootstrap-xsl/main/nmap-bootstrap.xsl
44 | 
45 | # convert your nmap xml file into html
46 | xsltproc -o report.html nmap-bootstrap.xsl <nmap.xml>
47 | ````
48 | 
49 | The resulting Nmap HTML report `report.html` can be directly opened with any web browser of your choice. 
50 | 
51 | ### Applying XSL in advance
52 | 
53 | If you have not yet started your Nmap port scan, you can also apply the bootstrap XSL in your Nmap CLI command as follows:
54 | 
55 | ````
56 | nmap -sS -Pn --stylesheet https://raw.githubusercontent.com/Haxxnet/nmap-bootstrap-xsl/main/nmap-bootstrap.xsl scanme.nmap.org
57 | ````
58 | 
59 | The resulting Nmap XML file can be directly opened with a supported web browser. The bootstrap XSL will already be applied.
60 | 
61 | > **Note**:
62 | > Nonetheless, it is recommended to convert the XML file into an HTML report. This ensures that the final Nmap bootstrap report is supported by all web browsers and that clients, to which you'll hopefully send your port scanning results, can easily categorize and open the file with the default OS application - a web browser.
63 | 
64 | ## 💎 Acknowledgment & Credits
65 | 
66 | Many thanks to the following individuals:
67 | 
68 | - ❤ [honze-net](https://github.com/honze-net) for [nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl)
69 | 


--------------------------------------------------------------------------------
/docs/report.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 | <head>
  4 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  5 | <meta name="referrer" content="no-referrer">
  6 | <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
  7 | <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
  8 | <link rel="stylesheet" href="https://cdn.datatables.net/buttons/2.0.1/css/buttons.dataTables.min.css" integrity="sha384-0OeHd2TJxoSDnW9bOIukOL7+BcfI6b17OHv54+JWrUbWq7ABgBO0rjW3OinB5vbG" crossorigin="anonymous">
  9 | <link rel="stylesheet" href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap.min.css" type="text/css" integrity="sha384-VEpVDzPR2x8NbTDZ8NFW4AWbtT2g/ollEzX/daZdW/YvUBlbgVtsxMftnJ84k0Cn" crossorigin="anonymous">
 10 | <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha384-fJU6sGmyn07b+uD1nMk7/iSb4yvaowcueiQhfVgQuD98rfva8mcr1eSvjchfpMrH" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js" integrity="sha384-rgWRqC0OFPisxlUvl332tiM/qmaNxnlY46eksSZD84t+s2vZlqGeHrncwIRX7CGp" crossorigin="anonymous"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.1.3/jszip.min.js" integrity="sha384-v9EFJbsxLXyYar8TvBV8zu5USBoaOC+ZB57GzCmQiWfgDIjS+wANZMP5gjwMLwGv" crossorigin="anonymous"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.53/pdfmake.min.js" integrity="sha384-HUHsYVOhSyHyZRTWv8zkbKVk7Xmg12CCNfKEUJ7cSuW/22Lz3BITd3Om6QeiXICb" crossorigin="anonymous"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.53/vfs_fonts.js" integrity="sha384-UAA3vlTPq9dwxB61awBFhR7Y5uBFOKQWuZueu4C6uI48gjIoqI/OTmYWEYWZXbGR" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/buttons/2.0.1/js/dataTables.buttons.min.js" integrity="sha384-MGimb05YiSGNcXiLlj03UNahXBECHmFTe5iVBqh6sf2G7ccabI3/EOqzBnNw97/T" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.html5.min.js" integrity="sha384-pp2ArcKo71umWphZ7QCCjQbnICkbOkLF88ZeoeZDPbqdAVvxZlcrla3lyT7pY/ue" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.colVis.min.js" integrity="sha384-enGTgEZOvC7C8P91Jt/27n1V3xD5SIzGi1e+DzYJvAts546YTsj3CNmnL0G/zlVn" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.bootstrap.min.js" integrity="sha384-Ndtz/aMKkdc9b0uTCirKXA6kJ8QfBTv73Ph9sv0wOiqK7NENdLN+qTpPX5skuhiM" crossorigin="anonymous"></script><script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap.min.js" integrity="sha384-7PXRkl4YJnEpP8uU4ev9652TTZSxrqC8uOpcV1ftVEC7LVyLZqqDUAaq+Y+lGgr9" crossorigin="anonymous"></script><script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script><style>
 11 | 
 12 |           .target:before {
 13 |             content: "";
 14 |             display: block;
 15 |             height: 50px;
 16 |             margin: -20px 0 0;
 17 |           }
 18 |           @media only screen and (min-width:1900px) {
 19 |             .container {
 20 |               width: 1800px;
 21 |               }
 22 |           }
 23 |           .footer {
 24 |             margin-top:60px;
 25 |             padding-top:45px;
 26 |             width: 100%;
 27 |             height: 180px;
 28 |             background-color: #f5f5f5;
 29 |           }
 30 |           .clickable {
 31 |             cursor: pointer;
 32 |           }
 33 |           .panel-heading > h3:before {
 34 |             font-family: 'Glyphicons Halflings';
 35 |             content: "\e114"; /* glyphicon-chevron-down */
 36 |             padding-right: 1em;
 37 |           }
 38 |           .panel-heading.collapsed > h3:before {
 39 |             content: "\e080"; /* glyphicon-chevron-right */
 40 |           }
 41 |         </style>
 42 | <title>Nmap Results</title>
 43 | </head>
 44 | <body>
 45 | <script>
 46 |           function highlight(){
 47 |               $("#table-services").dataTable().fnDestroy()
 48 |               let keywords = document.getElementById('keyword-input').value.split(',');
 49 |               let content = document.getElementById('table-services').innerHTML;
 50 |               document.getElementById('table-services').innerHTML = transformContent(content, keywords)
 51 |               $('#table-services').DataTable( {
 52 |               "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
 53 |               "order": [[ 0, 'desc' ]],
 54 |               "columnDefs": [
 55 |                 { "targets": [0], "orderable": true },
 56 |               ],
 57 |               dom:'lBfrtip', 
 58 |               stateSave: true,
 59 |               buttons: [
 60 |                   {
 61 |                       extend: 'copyHtml5',
 62 |                       exportOptions: { orthogonal: 'export' }
 63 |                   },
 64 |                   {
 65 |                       extend: 'csvHtml5',
 66 |                       exportOptions: { orthogonal: 'export' }
 67 |                   },
 68 |                   {
 69 |                       extend: 'excelHtml5',
 70 |                       exportOptions: { orthogonal: 'export' },
 71 |                       autoFilter: true,
 72 |                       title: '',
 73 |                   },
 74 |                   {
 75 |                       extend: 'pdfHtml5',
 76 |                       exportOptions: { orthogonal: 'export' },
 77 |                       orientation: 'landscape',
 78 |                       pageSize: 'LEGAL',
 79 |                       download: 'open',
 80 |                       exportOptions: {
 81 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
 82 |                 }
 83 |                   }
 84 |               ],
 85 |             });
 86 |           }
 87 | 
 88 |           function transformContent(content, keywords){
 89 |             let temp = content
 90 | 
 91 |             keywords.forEach(keyword => {
 92 |               temp = temp.replace(new RegExp(keyword, 'ig'), wrapKeywordWithHTML(keyword, keyword))
 93 |             })
 94 | 
 95 |             return temp
 96 |           }
 97 | 
 98 |           function wrapKeywordWithHTML(keyword, url){
 99 |             return `<span style="color: red;">${keyword}</span>`
100 |           }
101 |         </script><nav class="navbar navbar-default navbar-fixed-top"><div class="container-fluid">
102 | <div class="navbar-header">
103 | <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1" aria-expanded="false"><span class="sr-only">Toggle navigation</span><span class="icon-bar"></span><span class="icon-bar"></span><span class="icon-bar"></span></button><a class="navbar-brand" href="#"><span class="glyphicon glyphicon-home"></span></a>
104 | </div>
105 | <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1"><ul class="nav navbar-nav">
106 | <li><a href="#scannedhosts">Scanned Hosts</a></li>
107 | <li><a href="#openservices">Open Services</a></li>
108 | <li><a href="#webservices">Web Services</a></li>
109 | <li><a href="#onlinehosts">Online Hosts</a></li>
110 | <li><a href="#" style="pointer-events: none; cursor: default;">|</a></li>
111 | <li><a href="https://www.pentestfactory.de/schwachstellendatenbank/" target="_blank" title="Vulnerability Database by Pentest Factory"><span class="glyphicon glyphicon-new-window " style="color: #f7a90a;"></span> CVEs</a></li>
112 | <li><a href="https://www.ssllabs.com/ssltest/" target="_blank" title="SSL Server Test by Qualys"><span class="glyphicon glyphicon-new-window" style="color: #de1d0b;"></span> SSL/TLS</a></li>
113 | <li><a href="https://securityheaders.com/" target="_blank" title="HTTP Header Test by Scott Helme"><span class="glyphicon glyphicon-new-window" style="color: #3a71d8;"></span> Headers</a></li>
114 | </ul></div>
115 | </div></nav><div class="container" style="width: 94%">
116 | <div class="jumbotron" style="margin-top: 80px; padding-top: 5px; padding-bottom: 30px; padding-left: 30px; padding-right: 30px">
117 | <h2>Nmap Port Scanning Results</h2>
118 | <h2><small>Nmap Version 7.93<br>Sat Mar 11 20:27:34 2023 – Sat Mar 11 20:29:33 2023</small></h2>
119 | <pre style="white-space:pre-wrap; word-wrap:break-word;"><a target="_blank" href="https://explainshell.com/explain?cmd=nmap%20-sS%20-sV%20-sC%20-Pn%20--open%20--min-rate%205000%20--max-retries%203%20--script-timeout%20300%20-oA%20nmap_advanced_portscan%20-vvv%20-p-%20--min-hostgroup%20256%20scanme.nmap.org%20scanme2.nmap.org">nmap -sS -sV -sC -Pn --open --min-rate 5000 --max-retries 3 --script-timeout 300 -oA nmap_advanced_portscan -vvv -p- --min-hostgroup 256 scanme.nmap.org scanme2.nmap.org</a></pre>
120 | <p class="lead">2 hosts scanned.
121 |               2 hosts up.
122 |               0 hosts down.
123 |             </p>
124 | <div class="progress">
125 | <div class="progress-bar progress-bar-success" style="width:100%;">2<span class="sr-only"></span>
126 | </div>
127 | <div class="progress-bar progress-bar-danger" style="width:0%;">0<span class="sr-only"></span>
128 | </div>
129 | </div>
130 | <div id="form-wrapper">
131 | <div><textarea style="width: 100%;" title="Insert comma separated keywords to be highlighted" rows="1" name="keywords" placeholder="sha1,password,..." id="keyword-input">sha1,login,password,md5</textarea></div>
132 | <div style="margin-top: 2px">
133 | <button title="Keyword highlighing in 'Open Services'" id="highlight-button" onclick="highlight()">Highlight Keywords</button><button title="Reset keyword highlighing" id="reset-highlight-button" onclick="document.location.reload(true);">Reset</button>
134 | </div>
135 | <div style="margin-top: 25px" id="credits"><div>
136 | <span class="glyphicon glyphicon-heart" style="color: #de1d0b;padding-right: 5px"></span><a href="https://github.com/Haxxnet/nmap-bootstrap-xsl">Nmap Bootstrap XSL</a> by <a href="https://github.com/l4rm4nd">LRVT</a>
137 | </div></div>
138 | </div>
139 | </div>
140 | <h2 id="scannedhosts" class="target">Scanned Hosts</h2>
141 | <div class="table-responsive"><table id="table-overview" class="table table-striped dataTable" role="grid">
142 | <thead><tr>
143 | <th>State</th>
144 | <th>Address</th>
145 | <th>Hostname</th>
146 | <th>TCP (open)</th>
147 | <th>UDP (open)</th>
148 | </tr></thead>
149 | <tbody>
150 | <tr>
151 | <td><span class="label label-success">up</span></td>
152 | <td><a href="#onlinehosts-45-33-32-156">45.33.32.156</a></td>
153 | <td>scanme.nmap.org</td>
154 | <td>3</td>
155 | <td>0</td>
156 | </tr>
157 | <tr>
158 | <td><span class="label label-success">up</span></td>
159 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
160 | <td>scanme2.nmap.org</td>
161 | <td>4</td>
162 | <td>0</td>
163 | </tr>
164 | </tbody>
165 | </table></div>
166 | <h2 id="openservices" class="target">Open Services</h2>
167 | <div class="table-responsive"><table id="table-services" class="table table-striped dataTable" role="grid">
168 | <thead><tr>
169 | <th>Hostname</th>
170 | <th>Address</th>
171 | <th>Port</th>
172 | <th>Protocol</th>
173 | <th>Service</th>
174 | <th>Product</th>
175 | <th>Version</th>
176 | <th>Extra</th>
177 | <th>SSL Certificate</th>
178 | <th title="Title of HTTP services">Title</th>
179 | <th>CPE</th>
180 | </tr></thead>
181 | <tbody>
182 | <tr>
183 | <td>scanme.nmap.org</td>
184 | <td><a href="#onlinehosts-45-33-32-156">45.33.32.156</a></td>
185 | <td><a href="#port-45-33-32-156-22">22</a></td>
186 | <td>tcp</td>
187 | <td>ssh</td>
188 | <td>OpenSSH</td>
189 | <td>6.6.1p1 Ubuntu 2ubuntu2.13</td>
190 | <td>Ubuntu Linux; protocol 2.0</td>
191 | <td></td>
192 | <td></td>
193 | <td>cpe:/a:openbsd:openssh:6.6.1p1</td>
194 | </tr>
195 | <tr>
196 | <td>scanme.nmap.org</td>
197 | <td><a href="#onlinehosts-45-33-32-156">45.33.32.156</a></td>
198 | <td><a href="#port-45-33-32-156-80">80</a></td>
199 | <td>tcp</td>
200 | <td>http</td>
201 | <td>Apache httpd</td>
202 | <td>2.4.7</td>
203 | <td>(Ubuntu)</td>
204 | <td></td>
205 | <td><i>Go ahead and ScanMe!</i></td>
206 | <td>cpe:/a:apache:http_server:2.4.7</td>
207 | </tr>
208 | <tr>
209 | <td>scanme.nmap.org</td>
210 | <td><a href="#onlinehosts-45-33-32-156">45.33.32.156</a></td>
211 | <td><a href="#port-45-33-32-156-9929">9929</a></td>
212 | <td>tcp</td>
213 | <td>nping-echo</td>
214 | <td>Nping echo</td>
215 | <td></td>
216 | <td></td>
217 | <td></td>
218 | <td></td>
219 | <td></td>
220 | </tr>
221 | <tr>
222 | <td>scanme2.nmap.org</td>
223 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
224 | <td><a href="#port-45-33-49-119-22">22</a></td>
225 | <td>tcp</td>
226 | <td>ssh</td>
227 | <td>OpenSSH</td>
228 | <td>7.4</td>
229 | <td>protocol 2.0</td>
230 | <td></td>
231 | <td></td>
232 | <td>cpe:/a:openbsd:openssh:7.4</td>
233 | </tr>
234 | <tr>
235 | <td>scanme2.nmap.org</td>
236 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
237 | <td><a href="#port-45-33-49-119-25">25</a></td>
238 | <td>tcp</td>
239 | <td>smtp</td>
240 | <td>Postfix smtpd</td>
241 | <td></td>
242 | <td></td>
243 | <td>CN: <i>insecure.com</i><br>Expiry: <i>2023-05-12T10:01:21</i><br>SigAlgo: <i>sha256WithRSAEncryption</i>
244 | </td>
245 | <td></td>
246 | <td>cpe:/a:postfix:postfix</td>
247 | </tr>
248 | <tr>
249 | <td>scanme2.nmap.org</td>
250 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
251 | <td><a href="#port-45-33-49-119-80">80</a></td>
252 | <td>tcp</td>
253 | <td>http</td>
254 | <td>Apache httpd</td>
255 | <td>2.4.6</td>
256 | <td></td>
257 | <td></td>
258 | <td><i>Did not follow redirect to https://nmap.org/</i></td>
259 | <td>cpe:/a:apache:http_server:2.4.6</td>
260 | </tr>
261 | <tr>
262 | <td>scanme2.nmap.org</td>
263 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
264 | <td><a href="#port-45-33-49-119-443">443</a></td>
265 | <td>tcp</td>
266 | <td>ssl/http</td>
267 | <td>Apache httpd</td>
268 | <td>2.4.6</td>
269 | <td></td>
270 | <td>CN: <i>insecure.com</i><br>Expiry: <i>2023-05-12T10:01:21</i><br>SigAlgo: <i>sha256WithRSAEncryption</i>
271 | </td>
272 | <td><i>Did not follow redirect to https://nmap.org/</i></td>
273 | <td>cpe:/a:apache:http_server:2.4.6</td>
274 | </tr>
275 | </tbody>
276 | </table></div>
277 | <h2 id="webservices" class="target">Web Services</h2>
278 | <div class="table-responsive"><table id="web-services" class="table table-striped dataTable" role="grid">
279 | <thead><tr>
280 | <th>Hostname</th>
281 | <th>Address</th>
282 | <th>Port</th>
283 | <th>Service</th>
284 | <th>Produkt</th>
285 | <th>Version</th>
286 | <th>Title</th>
287 | <th>SSL Certificate</th>
288 | <th>URL</th>
289 | </tr></thead>
290 | <tbody>
291 | <tr>
292 | <td>scanme.nmap.org</td>
293 | <td><a href="#onlinehosts-45-33-32-156">45.33.32.156</a></td>
294 | <td><a href="#port-45-33-32-156-80">80</a></td>
295 | <td>http</td>
296 | <td>Apache httpd</td>
297 | <td>2.4.7</td>
298 | <td><i>Go ahead and ScanMe!</i></td>
299 | <td></td>
300 | <td><a target="_blank" href="http://scanme.nmap.org:80">http://scanme.nmap.org:80</a></td>
301 | </tr>
302 | <tr>
303 | <td>scanme2.nmap.org</td>
304 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
305 | <td><a href="#port-45-33-49-119-80">80</a></td>
306 | <td>http</td>
307 | <td>Apache httpd</td>
308 | <td>2.4.6</td>
309 | <td><i>Did not follow redirect to https://nmap.org/</i></td>
310 | <td></td>
311 | <td><a target="_blank" href="http://scanme2.nmap.org:80">http://scanme2.nmap.org:80</a></td>
312 | </tr>
313 | <tr>
314 | <td>scanme2.nmap.org</td>
315 | <td><a href="#onlinehosts-45-33-49-119">45.33.49.119</a></td>
316 | <td><a href="#port-45-33-49-119-443">443</a></td>
317 | <td>ssl/http</td>
318 | <td>Apache httpd</td>
319 | <td>2.4.6</td>
320 | <td><i>Did not follow redirect to https://nmap.org/</i></td>
321 | <td>CN: <i>insecure.com</i><br>Expiry: <i>2023-05-12T10:01:21</i><br>SigAlgo: <i>sha256WithRSAEncryption</i>
322 | </td>
323 | <td><a target="_blank" href="https://scanme2.nmap.org:443">https://scanme2.nmap.org:443</a></td>
324 | </tr>
325 | </tbody>
326 | </table></div>
327 | <h2 id="onlinehosts" class="target">Online Hosts</h2>
328 | <div class="panel panel-default">
329 | <div class="panel-heading clickable" data-toggle="collapse" id="onlinehosts-45-33-32-156" data-target="#45-33-32-156"><h3 class="panel-title">45.33.32.156 - scanme.nmap.org</h3></div>
330 | <div class="panel-body collapse in" id="45-33-32-156">
331 | <h4>Hostnames</h4>
332 | <ul>
333 | <li>scanme.nmap.org (user)</li>
334 | <li>scanme.nmap.org (PTR)</li>
335 | </ul>
336 | <h4>Ports</h4>
337 | <div class="table-responsive"><table class="table table-bordered">
338 | <thead><tr>
339 | <th>Port</th>
340 | <th>Protocol</th>
341 | <th>State<br>Reason</th>
342 | <th>Service</th>
343 | <th>Product</th>
344 | <th>Version</th>
345 | <th>Extra Info</th>
346 | </tr></thead>
347 | <tbody>
348 | <tr class="success">
349 | <td title="Port" id="port-45-33-32-156-22">22</td>
350 | <td title="Protocol">tcp</td>
351 | <td title="State / Reason">open<br>syn-ack</td>
352 | <td title="Service">ssh</td>
353 | <td title="Product">OpenSSH</td>
354 | <td title="Version">6.6.1p1 Ubuntu 2ubuntu2.13</td>
355 | <td title="Extra Info">Ubuntu Linux; protocol 2.0</td>
356 | </tr>
357 | <tr><td colspan="7">
358 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:openbsd:openssh:6.6.1p1">cpe:/a:openbsd:openssh:6.6.1p1</a><h5>ssh-hostkey</h5>
359 | <pre style="white-space:pre-wrap; word-wrap:break-word;">
360 |   1024 ac00a01a82ffcc5599dc672b34976b75 (DSA)
361 | ssh-dss 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
362 |   2048 203d2d44622ab05a9db5b30514c2a6b2 (RSA)
363 | ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6afooTZ9mVUGFNEhkMoRR1Btzu64XXwElhCsHw/zVlIx/HXylNbb9+11dm2VgJQ21pxkWDs+L6+EbYyDnvRURTrMTgHL0xseB0EkNqexs9hYZSiqtMx4jtGNtHvsMxZnbxvVUk2dasWvtBkn8J5JagSbzWTQo4hjKMOI1SUlXtiKxAs2F8wiq2EdSuKw/KNk8GfIp1TA+8ccGeAtnsVptTJ4D/8MhAWsROkQzOowQvnBBz2/8ecEvoMScaf+kDfNQowK3gENtSSOqYw9JLOza6YJBPL/aYuQQ0nJ74Rr5vL44aNIlrGI9jJc2x0bV7BeNA5kVuXsmhyfWbbkB8yGd
364 |   256 9602bb5e57541c4e452f564c4a24b257 (ECDSA)
365 | ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMD46g67x6yWNjjQJnXhiz/TskHrqQ0uPcOspFrIYW382uOGzmWDZCFV8FbFwQyH90u+j0Qr1SGNAxBZMhOQ8pc=
366 |   256 33fa910fe0e17b1f6d05a2b0f1544156 (ED25519)
367 | ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzVjfIyIHfXyRd8jVBaVT8Yvk/UvHh5Afvho8sGciG7</pre>
368 | </td></tr>
369 | <tr class="success">
370 | <td title="Port" id="port-45-33-32-156-80">80</td>
371 | <td title="Protocol">tcp</td>
372 | <td title="State / Reason">open<br>syn-ack</td>
373 | <td title="Service">http</td>
374 | <td title="Product">Apache httpd</td>
375 | <td title="Version">2.4.7</td>
376 | <td title="Extra Info">(Ubuntu)</td>
377 | </tr>
378 | <tr><td colspan="7">
379 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:apache:http_server:2.4.7">cpe:/a:apache:http_server:2.4.7</a><h5>http-title</h5>
380 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Go ahead and ScanMe!</pre>
381 | <h5>http-methods</h5>
382 | <pre style="white-space:pre-wrap; word-wrap:break-word;">
383 |   Supported Methods: GET HEAD POST OPTIONS</pre>
384 | <h5>http-favicon</h5>
385 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Nmap Project</pre>
386 | <h5>http-server-header</h5>
387 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Apache/2.4.7 (Ubuntu)</pre>
388 | </td></tr>
389 | <tr class="success">
390 | <td title="Port" id="port-45-33-32-156-9929">9929</td>
391 | <td title="Protocol">tcp</td>
392 | <td title="State / Reason">open<br>syn-ack</td>
393 | <td title="Service">nping-echo</td>
394 | <td title="Product">Nping echo</td>
395 | <td title="Version"></td>
396 | <td title="Extra Info"></td>
397 | </tr>
398 | <tr><td colspan="7"><a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version="></a></td></tr>
399 | </tbody>
400 | </table></div>
401 | </div>
402 | </div>
403 | <div class="panel panel-default">
404 | <div class="panel-heading clickable" data-toggle="collapse" id="onlinehosts-45-33-49-119" data-target="#45-33-49-119"><h3 class="panel-title">45.33.49.119 - scanme2.nmap.org</h3></div>
405 | <div class="panel-body collapse in" id="45-33-49-119">
406 | <h4>Hostnames</h4>
407 | <ul>
408 | <li>scanme2.nmap.org (user)</li>
409 | <li>ack.nmap.org (PTR)</li>
410 | </ul>
411 | <h4>Ports</h4>
412 | <div class="table-responsive"><table class="table table-bordered">
413 | <thead><tr>
414 | <th>Port</th>
415 | <th>Protocol</th>
416 | <th>State<br>Reason</th>
417 | <th>Service</th>
418 | <th>Product</th>
419 | <th>Version</th>
420 | <th>Extra Info</th>
421 | </tr></thead>
422 | <tbody>
423 | <tr class="success">
424 | <td title="Port" id="port-45-33-49-119-22">22</td>
425 | <td title="Protocol">tcp</td>
426 | <td title="State / Reason">open<br>syn-ack</td>
427 | <td title="Service">ssh</td>
428 | <td title="Product">OpenSSH</td>
429 | <td title="Version">7.4</td>
430 | <td title="Extra Info">protocol 2.0</td>
431 | </tr>
432 | <tr><td colspan="7">
433 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:openbsd:openssh:7.4">cpe:/a:openbsd:openssh:7.4</a><h5>ssh-hostkey</h5>
434 | <pre style="white-space:pre-wrap; word-wrap:break-word;">
435 |   2048 48e0c6cd140000dbb6b03df20a2a3b6d (RSA)
436 | ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOrn6FG1D6Z9flFRcBJyAD7twguPmDpnIQkK6R5zczrHPK7vyIx55zS9Gn//KfefecFkcu3AI8x/YTIMPb36UFyS/cJN/j1VY86eS6xJX/7VTzgZzcbAoBL8715EQgWoEz60mV698i8kXRqvvWJ1HDdwqWT+NtHIU3nEyHgWFCwQOCC5Y6dGe3JXvbv3BEXiMDaRRba+apTNOG+Gii92VjM1bo+UiiSo+scZCmZrTmZD+lDQbDhvmgPoWZ7FmUKLJOfZY44dyrgsLQuYVGuNwa6xNFi2BCr0+E6Vb4C8vQKOkYKOuNygL9atv+eptVz4XGtDVxBZoBr0NL574qVCX5
437 |   256 882b2900d0c781acddf49042d2aaf05b (ECDSA)
438 | ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBH2Vn80AsQMrvM0nAMhVmvVXROwxhWkS+hfXvtzKFkcofYcO6UfNVEDVcfZczTrKoNEvb0At0cX5WICgeCM1S1k=
439 |   256 64d6393504761cba17f3fd4f1fb37161 (ED25519)
440 | ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwv3wAH3YNnQYUjojwk4BWrG7Idd9QHA2YoZGIO7V/y</pre>
441 | </td></tr>
442 | <tr class="success">
443 | <td title="Port" id="port-45-33-49-119-25">25</td>
444 | <td title="Protocol">tcp</td>
445 | <td title="State / Reason">open<br>syn-ack</td>
446 | <td title="Service">smtp</td>
447 | <td title="Product">Postfix smtpd</td>
448 | <td title="Version"></td>
449 | <td title="Extra Info"></td>
450 | </tr>
451 | <tr><td colspan="7">
452 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:postfix:postfix">cpe:/a:postfix:postfix</a><h5>smtp-commands</h5>
453 | <pre style="white-space:pre-wrap; word-wrap:break-word;">ack.nmap.org, PIPELINING, SIZE 102400000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN</pre>
454 | <h5>ssl-date</h5>
455 | <pre style="white-space:pre-wrap; word-wrap:break-word;">TLS randomness does not represent time</pre>
456 | <h5>ssl-cert</h5>
457 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Subject: commonName=insecure.com
458 | Subject Alternative Name: DNS:insecure.com, DNS:insecure.org, DNS:issues.nmap.org, DNS:issues.npcap.org, DNS:nmap.com, DNS:nmap.net, DNS:nmap.org, DNS:npcap.com, DNS:npcap.org, DNS:seclists.com, DNS:seclists.net, DNS:seclists.org, DNS:sectools.com, DNS:sectools.net, DNS:sectools.org, DNS:secwiki.com, DNS:secwiki.net, DNS:secwiki.org, DNS:svn.nmap.org, DNS:www.nmap.org
459 | Issuer: commonName=R3/organizationName=Let's Encrypt/countryName=US
460 | Public Key type: rsa
461 | Public Key bits: 2048
462 | Signature Algorithm: sha256WithRSAEncryption
463 | Not valid before: 2023-02-11T10:01:22
464 | Not valid after:  2023-05-12T10:01:21
465 | MD5:   1b264c6723302b23b453bdd37e316da9
466 | SHA-1: 2bbb71fab60c50d220e0d0243f2d3d46c36ef70b
467 | -----BEGIN CERTIFICATE-----
468 | MIIGHjCCBQagAwIBAgISBOqporboNvsoylhNNmxAmHF9MA0GCSqGSIb3DQEBCwUA
469 | MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
470 | EwJSMzAeFw0yMzAyMTExMDAxMjJaFw0yMzA1MTIxMDAxMjFaMBcxFTATBgNVBAMT
471 | DGluc2VjdXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO+c
472 | LEYzcbVjyXvZiHH0R5J7x9ZlMQVGDqPD6zErjtKQgXgfE4WjXWc5LZMsHs4FRKw5
473 | MI8GBgyrwfhNVZBIrMBmWmtA6j1s53htYFY0ztf5gfdhSf1eqAenf4//rswpnvlu
474 | kQUJabVmE9dkBqDdgImhg8AUP/ApW+bKReeM6K4KYgjpOFeehe5GVTDZTqBgW103
475 | CUs99G7Cqa2LEEpwGPeDvJP6NuBOLP31NhexuyQ7cuQSh/mGsx1SdB53JtVee+C7
476 | UMk7rLD2dLzg0sly5gHfO6T7V8qMJ8JpCU67PIkMDl4EONDSsm3ohKuGNYvzSg6j
477 | H8b2mKcsZyvEsr1y6UMCAwEAAaOCA0cwggNDMA4GA1UdDwEB/wQEAwIFoDAdBgNV
478 | HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
479 | FgQUU41mIYkTy3mKElE6Q52FZwkJHYYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
480 | 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
481 | by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
482 | ggEXBgNVHREEggEOMIIBCoIMaW5zZWN1cmUuY29tggxpbnNlY3VyZS5vcmeCD2lz
483 | c3Vlcy5ubWFwLm9yZ4IQaXNzdWVzLm5wY2FwLm9yZ4IIbm1hcC5jb22CCG5tYXAu
484 | bmV0gghubWFwLm9yZ4IJbnBjYXAuY29tgglucGNhcC5vcmeCDHNlY2xpc3RzLmNv
485 | bYIMc2VjbGlzdHMubmV0ggxzZWNsaXN0cy5vcmeCDHNlY3Rvb2xzLmNvbYIMc2Vj
486 | dG9vbHMubmV0ggxzZWN0b29scy5vcmeCC3NlY3dpa2kuY29tggtzZWN3aWtpLm5l
487 | dIILc2Vjd2lraS5vcmeCDHN2bi5ubWFwLm9yZ4IMd3d3Lm5tYXAub3JnMEwGA1Ud
488 | IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
489 | dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu
490 | AHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGQCMH1gAABAMA
491 | RjBEAiBm7P2rfixUuxOORx5lKHY9Ds36LpYu6kFwEmd2+o41BQIgOsIjTOW9zZeJ
492 | X4VYBBG5/Iih6vUlP7uOt0kV0O+A28kAdQCt9776fP8QyIudPZwePhhqtGcpXc+x
493 | DCTKhYY069yCigAAAYZAIwfnAAAEAwBGMEQCIGeF+8qczjSWq4fDa3Zd+3+Go0gm
494 | IAWrVorG68zzloOYAiBXOsn/PjoFFpbm/imnItDEFA8cmFr0b9zz+i1odyd3BTAN
495 | BgkqhkiG9w0BAQsFAAOCAQEAYyaybOGvrdvdMxNxGlKyHKqdXWbQCjE+1eLwWiSI
496 | IsRUTmaNCXCbXHsj9j3GQZKC+w8C88Lt0AzhS6pkO2bJXK7yC8Fzd080Gk+GlG/r
497 | uEBqa7L3bx3p0EHBH9wfUdz6JlKDEmAGITJUrrD2X8FNeyDiztEvM/E6TMQW7jPI
498 | guxs1ww+Ed2nXpgBnUwK7HNpSuFD9n98xkBUXJkWGT2vYqZ/m+dGGwLmAltzxTdS
499 | /ycfgUlcQrqo3n8BV42jDMCHhOcs0Bpvt1cwpSWM+wa4EmbdPIG3aK78fVw0oAVh
500 | tQL8+epINgVEdOxgOEpMslYHKMBgc8yiaq215AULT10AHQ==
501 | -----END CERTIFICATE-----
502 | </pre>
503 | </td></tr>
504 | <tr class="success">
505 | <td title="Port" id="port-45-33-49-119-80">80</td>
506 | <td title="Protocol">tcp</td>
507 | <td title="State / Reason">open<br>syn-ack</td>
508 | <td title="Service">http</td>
509 | <td title="Product">Apache httpd</td>
510 | <td title="Version">2.4.6</td>
511 | <td title="Extra Info"></td>
512 | </tr>
513 | <tr><td colspan="7">
514 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:apache:http_server:2.4.6">cpe:/a:apache:http_server:2.4.6</a><h5>http-title</h5>
515 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Did not follow redirect to https://nmap.org/</pre>
516 | <h5>http-methods</h5>
517 | <pre style="white-space:pre-wrap; word-wrap:break-word;">
518 |   Supported Methods: GET HEAD POST OPTIONS</pre>
519 | <h5>http-server-header</h5>
520 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Apache/2.4.6 (CentOS)</pre>
521 | </td></tr>
522 | <tr class="success">
523 | <td title="Port" id="port-45-33-49-119-443">443</td>
524 | <td title="Protocol">tcp</td>
525 | <td title="State / Reason">open<br>syn-ack</td>
526 | <td title="Service">ssl/http</td>
527 | <td title="Product">Apache httpd</td>
528 | <td title="Version">2.4.6</td>
529 | <td title="Extra Info"></td>
530 | </tr>
531 | <tr><td colspan="7">
532 | <a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:apache:http_server:2.4.6">cpe:/a:apache:http_server:2.4.6</a><h5>http-title</h5>
533 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Did not follow redirect to https://nmap.org/</pre>
534 | <h5>http-methods</h5>
535 | <pre style="white-space:pre-wrap; word-wrap:break-word;">
536 |   Supported Methods: GET HEAD POST OPTIONS</pre>
537 | <h5>ssl-date</h5>
538 | <pre style="white-space:pre-wrap; word-wrap:break-word;">TLS randomness does not represent time</pre>
539 | <h5>ssl-cert</h5>
540 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Subject: commonName=insecure.com
541 | Subject Alternative Name: DNS:insecure.com, DNS:insecure.org, DNS:issues.nmap.org, DNS:issues.npcap.org, DNS:nmap.com, DNS:nmap.net, DNS:nmap.org, DNS:npcap.com, DNS:npcap.org, DNS:seclists.com, DNS:seclists.net, DNS:seclists.org, DNS:sectools.com, DNS:sectools.net, DNS:sectools.org, DNS:secwiki.com, DNS:secwiki.net, DNS:secwiki.org, DNS:svn.nmap.org, DNS:www.nmap.org
542 | Issuer: commonName=R3/organizationName=Let's Encrypt/countryName=US
543 | Public Key type: rsa
544 | Public Key bits: 2048
545 | Signature Algorithm: sha256WithRSAEncryption
546 | Not valid before: 2023-02-11T10:01:22
547 | Not valid after:  2023-05-12T10:01:21
548 | MD5:   1b264c6723302b23b453bdd37e316da9
549 | SHA-1: 2bbb71fab60c50d220e0d0243f2d3d46c36ef70b
550 | -----BEGIN CERTIFICATE-----
551 | MIIGHjCCBQagAwIBAgISBOqporboNvsoylhNNmxAmHF9MA0GCSqGSIb3DQEBCwUA
552 | MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
553 | EwJSMzAeFw0yMzAyMTExMDAxMjJaFw0yMzA1MTIxMDAxMjFaMBcxFTATBgNVBAMT
554 | DGluc2VjdXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO+c
555 | LEYzcbVjyXvZiHH0R5J7x9ZlMQVGDqPD6zErjtKQgXgfE4WjXWc5LZMsHs4FRKw5
556 | MI8GBgyrwfhNVZBIrMBmWmtA6j1s53htYFY0ztf5gfdhSf1eqAenf4//rswpnvlu
557 | kQUJabVmE9dkBqDdgImhg8AUP/ApW+bKReeM6K4KYgjpOFeehe5GVTDZTqBgW103
558 | CUs99G7Cqa2LEEpwGPeDvJP6NuBOLP31NhexuyQ7cuQSh/mGsx1SdB53JtVee+C7
559 | UMk7rLD2dLzg0sly5gHfO6T7V8qMJ8JpCU67PIkMDl4EONDSsm3ohKuGNYvzSg6j
560 | H8b2mKcsZyvEsr1y6UMCAwEAAaOCA0cwggNDMA4GA1UdDwEB/wQEAwIFoDAdBgNV
561 | HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
562 | FgQUU41mIYkTy3mKElE6Q52FZwkJHYYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
563 | 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
564 | by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
565 | ggEXBgNVHREEggEOMIIBCoIMaW5zZWN1cmUuY29tggxpbnNlY3VyZS5vcmeCD2lz
566 | c3Vlcy5ubWFwLm9yZ4IQaXNzdWVzLm5wY2FwLm9yZ4IIbm1hcC5jb22CCG5tYXAu
567 | bmV0gghubWFwLm9yZ4IJbnBjYXAuY29tgglucGNhcC5vcmeCDHNlY2xpc3RzLmNv
568 | bYIMc2VjbGlzdHMubmV0ggxzZWNsaXN0cy5vcmeCDHNlY3Rvb2xzLmNvbYIMc2Vj
569 | dG9vbHMubmV0ggxzZWN0b29scy5vcmeCC3NlY3dpa2kuY29tggtzZWN3aWtpLm5l
570 | dIILc2Vjd2lraS5vcmeCDHN2bi5ubWFwLm9yZ4IMd3d3Lm5tYXAub3JnMEwGA1Ud
571 | IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
572 | dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu
573 | AHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGQCMH1gAABAMA
574 | RjBEAiBm7P2rfixUuxOORx5lKHY9Ds36LpYu6kFwEmd2+o41BQIgOsIjTOW9zZeJ
575 | X4VYBBG5/Iih6vUlP7uOt0kV0O+A28kAdQCt9776fP8QyIudPZwePhhqtGcpXc+x
576 | DCTKhYY069yCigAAAYZAIwfnAAAEAwBGMEQCIGeF+8qczjSWq4fDa3Zd+3+Go0gm
577 | IAWrVorG68zzloOYAiBXOsn/PjoFFpbm/imnItDEFA8cmFr0b9zz+i1odyd3BTAN
578 | BgkqhkiG9w0BAQsFAAOCAQEAYyaybOGvrdvdMxNxGlKyHKqdXWbQCjE+1eLwWiSI
579 | IsRUTmaNCXCbXHsj9j3GQZKC+w8C88Lt0AzhS6pkO2bJXK7yC8Fzd080Gk+GlG/r
580 | uEBqa7L3bx3p0EHBH9wfUdz6JlKDEmAGITJUrrD2X8FNeyDiztEvM/E6TMQW7jPI
581 | guxs1ww+Ed2nXpgBnUwK7HNpSuFD9n98xkBUXJkWGT2vYqZ/m+dGGwLmAltzxTdS
582 | /ycfgUlcQrqo3n8BV42jDMCHhOcs0Bpvt1cwpSWM+wa4EmbdPIG3aK78fVw0oAVh
583 | tQL8+epINgVEdOxgOEpMslYHKMBgc8yiaq215AULT10AHQ==
584 | -----END CERTIFICATE-----
585 | </pre>
586 | <h5>http-server-header</h5>
587 | <pre style="white-space:pre-wrap; word-wrap:break-word;">Apache/2.4.6 (CentOS)</pre>
588 | </td></tr>
589 | </tbody>
590 | </table></div>
591 | </div>
592 | </div>
593 | </div>
594 | <footer class="footer"><div class="container"><p class="text-muted">
595 |               This report was generated by or with the help of <a href="https://pentestfactory.com">Pentest Factory GmbH</a>.<br>
596 |               If you have questions or problems do not hesitate <a href="mailto:team@pentestfactory.de">contacting us</a>.<br><br><span class="glyphicon glyphicon-heart" style="color: #de1d0b;"></span> Bootstrap Template by <a href="https://github.com/honze-net/nmap-bootstrap-xsl" target="_blank">Andreas Hontzia</a><br><span class="glyphicon glyphicon-heart" style="color: #de1d0b;"></span> Tweaks and Extensions by <a href="https://github.com/l4rm4nd">LRVT</a></p></div></footer><script>
597 |           $(document).ready(function() {
598 |             $('#table-services').DataTable();
599 |             $("a[href^='#onlinehosts-']").click(function(event){     
600 |                 event.preventDefault();
601 |                 $('html,body').animate({scrollTop:($(this.hash).offset().top-60)}, 500);
602 |             });
603 |           });
604 |           $('#table-services').DataTable( {
605 |             "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
606 |             "order": [[ 0, 'desc' ]],
607 |             "columnDefs": [
608 |               { "targets": [0], "orderable": true },
609 |             ],
610 |             dom:'lBfrtip', 
611 |             stateSave: true,
612 |             buttons: [
613 |                 {
614 |                     extend: 'copyHtml5',
615 |                     exportOptions: { orthogonal: 'export' }
616 |                 },
617 |                 {
618 |                     extend: 'csvHtml5',
619 |                     exportOptions: { orthogonal: 'export' }
620 |                 },
621 |                 {
622 |                     extend: 'excelHtml5',
623 |                     exportOptions: { orthogonal: 'export' },
624 |                     autoFilter: true,
625 |                     title: '',
626 |                 },
627 |                 {
628 |                     extend: 'pdfHtml5',
629 |                     orientation: 'landscape',
630 |                     pageSize: 'LEGAL',
631 |                     download: 'open',
632 |                     exportOptions: {
633 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
634 |                     }
635 |                 }
636 |             ],
637 |           });
638 |         </script><script>
639 |           $(document).ready(function() {
640 |             $('#web-services').DataTable();
641 |           });
642 |           $('#web-services').DataTable( {
643 |             "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
644 |             "order": [[ 0, 'desc' ]],
645 |             "columnDefs": [
646 |               { "targets": [0], "orderable": true },
647 |             ],
648 |             dom:'lBfrtip', 
649 |             stateSave: true,
650 |             buttons: [
651 |                 {
652 |                     extend: 'copyHtml5',
653 |                     exportOptions: { orthogonal: 'export' }
654 |                 },
655 |                 {
656 |                     extend: 'csvHtml5',
657 |                     exportOptions: { orthogonal: 'export' }
658 |                 },
659 |                 {
660 |                     extend: 'excelHtml5',
661 |                     exportOptions: { orthogonal: 'export' },
662 |                     autoFilter: true,
663 |                     title: '',
664 |                 },
665 |                 {
666 |                     extend: 'pdfHtml5',
667 |                     orientation: 'landscape',
668 |                     pageSize: 'LEGAL',
669 |                     download: 'open',
670 |                     exportOptions: {
671 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
672 |                     }
673 |                 }
674 |             ],
675 |           });
676 |         </script><script>
677 |           $(document).ready(function() {
678 |             $('#table-overview').DataTable();
679 |           });
680 |           $('#table-overview').DataTable( {
681 |             "lengthMenu": [ [5, 10, 25, 50, 100, -1], [5, 10, 25, 50, 100, "All"] ],
682 |           });
683 |         </script>
684 | </body>
685 | </html>
686 | 


--------------------------------------------------------------------------------
/nmap-bootstrap.xsl:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8"?>
  2 | <!--
  3 | Nmap Bootstrap XSL
  4 | This software must not be used by military or secret service organisations.
  5 | Andreas Hontzia (@honze_net) & LRVT (@l4rm4nd)
  6 | -->
  7 | <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
  8 |   <xsl:output method="html" encoding="utf-8" indent="yes" doctype-system="about:legacy-compat"/>
  9 |   <xsl:template match="/">
 10 |     <html lang="en">
 11 |       <head>
 12 |         <meta name="referrer" content="no-referrer"/> 
 13 |         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous"/>
 14 |         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous"/>
 15 |         <link rel="stylesheet" href="https://cdn.datatables.net/buttons/2.0.1/css/buttons.dataTables.min.css" integrity="sha384-0OeHd2TJxoSDnW9bOIukOL7+BcfI6b17OHv54+JWrUbWq7ABgBO0rjW3OinB5vbG" crossorigin="anonymous"/>
 16 |         <link rel="stylesheet" href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap.min.css" type="text/css" integrity="sha384-VEpVDzPR2x8NbTDZ8NFW4AWbtT2g/ollEzX/daZdW/YvUBlbgVtsxMftnJ84k0Cn" crossorigin="anonymous"/>
 17 | 
 18 |         <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha384-fJU6sGmyn07b+uD1nMk7/iSb4yvaowcueiQhfVgQuD98rfva8mcr1eSvjchfpMrH" crossorigin="anonymous"></script>
 19 |         <script src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js" integrity="sha384-rgWRqC0OFPisxlUvl332tiM/qmaNxnlY46eksSZD84t+s2vZlqGeHrncwIRX7CGp" crossorigin="anonymous"></script>
 20 |         <script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.1.3/jszip.min.js" integrity="sha384-v9EFJbsxLXyYar8TvBV8zu5USBoaOC+ZB57GzCmQiWfgDIjS+wANZMP5gjwMLwGv" crossorigin="anonymous"></script>
 21 |         <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.53/pdfmake.min.js" integrity="sha384-HUHsYVOhSyHyZRTWv8zkbKVk7Xmg12CCNfKEUJ7cSuW/22Lz3BITd3Om6QeiXICb" crossorigin="anonymous"></script>
 22 |         <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.53/vfs_fonts.js" integrity="sha384-UAA3vlTPq9dwxB61awBFhR7Y5uBFOKQWuZueu4C6uI48gjIoqI/OTmYWEYWZXbGR" crossorigin="anonymous"></script>
 23 |         <script src="https://cdn.datatables.net/buttons/2.0.1/js/dataTables.buttons.min.js" integrity="sha384-MGimb05YiSGNcXiLlj03UNahXBECHmFTe5iVBqh6sf2G7ccabI3/EOqzBnNw97/T" crossorigin="anonymous"></script>
 24 |         <script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.html5.min.js" integrity="sha384-pp2ArcKo71umWphZ7QCCjQbnICkbOkLF88ZeoeZDPbqdAVvxZlcrla3lyT7pY/ue" crossorigin="anonymous"></script>
 25 |         <script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.colVis.min.js" integrity="sha384-enGTgEZOvC7C8P91Jt/27n1V3xD5SIzGi1e+DzYJvAts546YTsj3CNmnL0G/zlVn" crossorigin="anonymous"></script>
 26 |         <script src="https://cdn.datatables.net/buttons/2.0.1/js/buttons.bootstrap.min.js" integrity="sha384-Ndtz/aMKkdc9b0uTCirKXA6kJ8QfBTv73Ph9sv0wOiqK7NENdLN+qTpPX5skuhiM" crossorigin="anonymous"></script>
 27 |         <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap.min.js" integrity="sha384-7PXRkl4YJnEpP8uU4ev9652TTZSxrqC8uOpcV1ftVEC7LVyLZqqDUAaq+Y+lGgr9" crossorigin="anonymous"></script>
 28 |         <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
 29 |         <script src="https://cdn.datatables.net/plug-ins/2.1.0/sorting/ip-address.js" integrity="sha384-pbrITLqgA4lSZJgcYMK/c5hfUpOg+2vjjMQPdRv4hPEoBFYVWEuF1H3faZskzO9a" crossorigin="anonymous"></script>
 30 |         <style>
 31 | 
 32 |           .target:before {
 33 |             content: "";
 34 |             display: block;
 35 |             height: 50px;
 36 |             margin: -20px 0 0;
 37 |           }
 38 |           @media only screen and (min-width:1900px) {
 39 |             .container {
 40 |               width: 1800px;
 41 |               }
 42 |           }
 43 |           .footer {
 44 |             margin-top:60px;
 45 |             padding-top:45px;
 46 |             width: 100%;
 47 |             height: 180px;
 48 |             background-color: #f5f5f5;
 49 |           }
 50 |           .clickable {
 51 |             cursor: pointer;
 52 |           }
 53 |           .panel-heading > h3:before {
 54 |             font-family: 'Glyphicons Halflings';
 55 |             content: "\e114"; /* glyphicon-chevron-down */
 56 |             padding-right: 1em;
 57 |           }
 58 |           .panel-heading.collapsed > h3:before {
 59 |             content: "\e080"; /* glyphicon-chevron-right */
 60 |           }
 61 |         </style>
 62 |         <title>Nmap Results</title>
 63 |       </head>
 64 |       <body>
 65 |         <script>
 66 |           function highlight(){
 67 |               $("#table-services").dataTable().fnDestroy()
 68 |               let keywords = document.getElementById('keyword-input').value.split(',');
 69 |               let content = document.getElementById('table-services').innerHTML;
 70 |               document.getElementById('table-services').innerHTML = transformContent(content, keywords)
 71 |               $('#table-services').DataTable( {
 72 |               "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
 73 |               "order": [[ 0, 'desc' ]],
 74 |               "columnDefs": [
 75 |                 { "targets": [0], "orderable": true },
 76 |               ],
 77 |               dom:'lBfrtip', 
 78 |               stateSave: true,
 79 |               buttons: [
 80 |                   {
 81 |                       extend: 'copyHtml5',
 82 |                       exportOptions: { orthogonal: 'export' }
 83 |                   },
 84 |                   {
 85 |                       extend: 'csvHtml5',
 86 |                       exportOptions: { orthogonal: 'export' }
 87 |                   },
 88 |                   {
 89 |                       extend: 'excelHtml5',
 90 |                       exportOptions: { orthogonal: 'export' },
 91 |                       autoFilter: true,
 92 |                       title: '',
 93 |                   },
 94 |                   {
 95 |                       extend: 'pdfHtml5',
 96 |                       exportOptions: { orthogonal: 'export' },
 97 |                       orientation: 'landscape',
 98 |                       pageSize: 'LEGAL',
 99 |                       download: 'open',
100 |                       exportOptions: {
101 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
102 |                 }
103 |                   }
104 |               ],
105 |             });
106 |           }
107 | 
108 |           function transformContent(content, keywords){
109 |             let temp = content
110 | 
111 |             keywords.forEach(keyword => {
112 |               temp = temp.replace(new RegExp(keyword, 'ig'), wrapKeywordWithHTML(keyword, keyword))
113 |             })
114 | 
115 |             return temp
116 |           }
117 | 
118 |           function wrapKeywordWithHTML(keyword, url){
119 |             return `<span style="color: red;">${keyword}</span>`
120 |           }
121 |         </script>
122 |         <nav class="navbar navbar-default navbar-fixed-top">
123 |           <div class="container-fluid">
124 |             <div class="navbar-header">
125 |               <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1" aria-expanded="false">
126 |                 <span class="sr-only">Toggle navigation</span>
127 |                 <span class="icon-bar"></span>
128 |                 <span class="icon-bar"></span>
129 |                 <span class="icon-bar"></span>
130 |               </button>
131 |               <a class="navbar-brand" href="#"><span class="glyphicon glyphicon-home"></span></a>
132 |             </div>
133 |             <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1">
134 |               <ul class="nav navbar-nav">
135 |                 <li><a href="#scannedhosts">Scanned Hosts</a></li>
136 |                 <li><a href="#openservices">Open Services</a></li>
137 |                 <li><a href="#webservices">Web Services</a></li>
138 |                 <li><a href="#onlinehosts">Online Hosts</a></li>
139 |                 <li><a href="#" style="pointer-events: none; cursor: default;">|</a></li>
140 |                 <li><a href="https://www.pentestfactory.de/schwachstellendatenbank/" target="_blank" title="Vulnerability Database by Pentest Factory"><span class="glyphicon glyphicon-new-window " style="color: #f7a90a;"></span> CVEs</a></li>
141 |                 <li><a href="https://www.ssllabs.com/ssltest/" target="_blank" title="SSL Server Test by Qualys"><span class="glyphicon glyphicon-new-window" style="color: #de1d0b;"></span> SSL/TLS</a></li>
142 |                 <li><a href="https://securityheaders.com/" target="_blank" title="HTTP Header Test by Scott Helme"><span class="glyphicon glyphicon-new-window" style="color: #3a71d8;"></span> Headers</a></li>
143 |               </ul>
144 |             </div>
145 |           </div>
146 |         </nav>
147 |         <div class="container" style="width: 94%">
148 |           <div class="jumbotron" style="margin-top: 80px; padding-top: 5px; padding-bottom: 30px; padding-left: 30px; padding-right: 30px">
149 |             <h2>Nmap Port Scanning Results</h2>
150 |             <h2><small>Nmap Version <xsl:value-of select="/nmaprun/@version"/>
151 |             <br/><xsl:value-of select="/nmaprun/@startstr"/> – <xsl:value-of select="/nmaprun/runstats/finished/@timestr"/></small></h2>
152 |             <pre style="white-space:pre-wrap; word-wrap:break-word;"><a target="_blank"><xsl:attribute name="href">https://explainshell.com/explain?cmd=<xsl:value-of select="/nmaprun/@args"/></xsl:attribute><xsl:value-of select="/nmaprun/@args"/></a></pre>
153 |             <p class="lead">
154 |               <xsl:value-of select="/nmaprun/runstats/hosts/@total"/> hosts scanned.
155 |               <xsl:value-of select="/nmaprun/runstats/hosts/@up"/> hosts up.
156 |               <xsl:value-of select="/nmaprun/runstats/hosts/@down"/> hosts down.
157 |             </p>
158 |             <div class="progress">
159 |               <div class="progress-bar progress-bar-success" style="width: 0%">
160 |                 <xsl:attribute name="style">width:<xsl:value-of select="/nmaprun/runstats/hosts/@up div /nmaprun/runstats/hosts/@total * 100"/>%;</xsl:attribute>
161 |                 <xsl:value-of select="/nmaprun/runstats/hosts/@up"/>
162 |                 <span class="sr-only"></span>
163 |               </div>
164 |               <div class="progress-bar progress-bar-danger" style="width: 0%">
165 |                 <xsl:attribute name="style">width:<xsl:value-of select="/nmaprun/runstats/hosts/@down div /nmaprun/runstats/hosts/@total * 100"/>%;</xsl:attribute>
166 |                 <xsl:value-of select="/nmaprun/runstats/hosts/@down"/>
167 |                 <span class="sr-only"></span>
168 |               </div>
169 |               </div>
170 |               <div id="form-wrapper">
171 |                 <div>
172 |                     <textarea style="width: 100%;" title="Insert comma separated keywords to be highlighted" rows = "1" name = "keywords" placeholder="sha1,password,..." id="keyword-input">sha1,login,password,md5</textarea>
173 |                 </div>
174 |                 <div style="margin-top: 2px">
175 |                     <button title="Keyword highlighing in 'Open Services'" id="highlight-button" onclick="highlight()">Highlight Keywords</button>
176 |                     <button title="Reset keyword highlighing" id="reset-highlight-button" onclick="document.location.reload(true);">Reset</button>
177 |                 </div>
178 |                 <div style="margin-top: 25px" id="credits">
179 |                   <div><span class="glyphicon glyphicon-heart" style="color: #de1d0b;padding-right: 5px"></span><a href="https://github.com/Haxxnet/nmap-bootstrap-xsl">Nmap Bootstrap XSL</a> by <a href="https://github.com/l4rm4nd">LRVT</a></div>
180 |                 </div>
181 |             </div>
182 |           </div>
183 |           <h2 id="scannedhosts" class="target">Scanned Hosts<xsl:if test="/nmaprun/runstats/hosts/@down > 1024"><small> (offline hosts are hidden)</small></xsl:if></h2>
184 |           <div class="table-responsive">
185 |             <table id="table-overview" class="table table-striped dataTable" role="grid">
186 |               <thead>
187 |                 <tr>
188 |                   <th>State</th>
189 |                   <th>Address</th>
190 |                   <th>Hostname</th>
191 |                   <th>TCP (open)</th>
192 |                   <th>UDP (open)</th>
193 |                 </tr>
194 |               </thead>
195 |               <tbody>
196 |                 <xsl:choose>
197 |                   <xsl:when test="/nmaprun/runstats/hosts/@down > 1024">
198 |                     <xsl:for-each select="/nmaprun/host[status/@state='up']">
199 |                       <tr>
200 |                         <td><span class="label label-danger"><xsl:if test="status/@state='up'"><xsl:attribute name="class">label label-success</xsl:attribute></xsl:if><xsl:value-of select="status/@state"/></span></td>
201 |                         <td><a><xsl:attribute name="href">#onlinehosts-<xsl:value-of select="translate(address/@addr, '.', '-')"/></xsl:attribute><xsl:value-of select="address/@addr"/></a></td>
202 |                         <td><xsl:value-of select="hostnames/hostname/@name"/></td>
203 |                         <td><xsl:value-of select="count(ports/port[state/@state='open' and @protocol='tcp'])"/></td>
204 |                         <td><xsl:value-of select="count(ports/port[state/@state='open' and @protocol='udp'])"/></td>
205 |                       </tr>
206 |                     </xsl:for-each>
207 |                   </xsl:when>
208 |                   <xsl:otherwise>
209 |                     <xsl:for-each select="/nmaprun/host">
210 |                       <tr>
211 |                         <td><span class="label label-danger"><xsl:if test="status/@state='up'"><xsl:attribute name="class">label label-success</xsl:attribute></xsl:if><xsl:value-of select="status/@state"/></span></td>
212 |                         <td><a><xsl:attribute name="href">#onlinehosts-<xsl:value-of select="translate(address/@addr, '.', '-')"/></xsl:attribute><xsl:value-of select="address/@addr"/></a></td>
213 |                         <td><xsl:value-of select="hostnames/hostname/@name"/></td>
214 |                         <td><xsl:value-of select="count(ports/port[state/@state='open' and @protocol='tcp'])"/></td>
215 |                         <td><xsl:value-of select="count(ports/port[state/@state='open' and @protocol='udp'])"/></td>
216 |                       </tr>
217 |                     </xsl:for-each>
218 |                   </xsl:otherwise>
219 |                 </xsl:choose>
220 |               </tbody>
221 |             </table>
222 |           </div>
223 |           <h2 id="openservices" class="target">Open Services</h2>
224 |           <div class="table-responsive">
225 |             <table id="table-services" class="table table-striped dataTable" role="grid">
226 |               <thead >
227 |                 <tr>
228 |                   <!--<th title="Temporary Checkbox"></th>-->
229 |                   <th>Hostname</th>
230 |                   <th>Address</th>
231 |                   <th>Port</th>
232 |                   <th>Protocol</th>
233 |                   <th>Service</th>
234 |                   <th>Product</th>
235 |                   <th>Version</th>
236 |                   <th>Extra</th>
237 |                   <th>SSL Certificate</th>
238 |                   <th title="Title of HTTP services">Title</th>
239 |                   <th>CPE</th>
240 |                 </tr>
241 |               </thead>
242 |               <tbody>
243 |                 <xsl:for-each select="/nmaprun/host">
244 |                   <xsl:for-each select="ports/port[state/@state='open']">
245 |                     <tr>
246 |                       <!--<td><input name="select_all" value="1" type="checkbox"></input></td>-->
247 |                       <td>
248 |                       <xsl:if test="count(../../hostnames/hostname) = 0">N/A</xsl:if>
249 |                       <xsl:if test="count(../../hostnames/hostname) > 0"><xsl:value-of select="../../hostnames/hostname/@name"/></xsl:if></td>
250 |                       <td><a>
251 |                       <xsl:attribute name="href">#onlinehosts-<xsl:value-of select="translate(../../address/@addr, '.', '-')"/></xsl:attribute><xsl:value-of select="../../address/@addr"/></a></td>
252 |                       
253 |                       <td><a>
254 |                       <xsl:attribute name="href">#port-<xsl:value-of select="translate(../../address/@addr, '.', '-')"/>-<xsl:value-of select="@portid"/></xsl:attribute><xsl:value-of select="@portid"/></a></td>
255 |                       <td><xsl:value-of select="@protocol"/></td>
256 |                       <td><xsl:if test="count(service/@tunnel) > 0"><xsl:value-of select="service/@tunnel"/>/</xsl:if><xsl:value-of select="service/@name"/></td>
257 |                       <td><xsl:value-of select="service/@product"/></td>
258 |                       <td><xsl:value-of select="service/@version"/></td>
259 |                       <td><xsl:value-of select="service/@extrainfo"/></td>
260 |                       <td>
261 |                         <xsl:if test="count(script/table[@key='subject']/elem[@key='commonName']) > 0">CN: <i><xsl:value-of select="script/table[@key='subject']/elem[@key='commonName']"/></i></xsl:if>
262 |                         <xsl:if test="count(script/table[@key='validity']/elem[@key='notAfter']) > 0"><br/>Expiry: <i><xsl:value-of select="script/table[@key='validity']/elem[@key='notAfter']"/></i></xsl:if>
263 |                         <xsl:if test="count(script/elem[@key='sig_algo']) > 0"><br/>SigAlgo: <i><xsl:value-of select="script/elem[@key='sig_algo']"/></i></xsl:if>
264 |                       </td>
265 |                       <td><xsl:choose><xsl:when test="count(script[@id='http-title']/elem[@key='title']) > 0"><i><xsl:value-of select="script[@id='http-title']/elem[@key='title']"/></i></xsl:when><xsl:otherwise><xsl:if test="count(script[@id='http-title']/@output) > 0"><i><xsl:value-of select="script[@id='http-title']/@output"/></i></xsl:if></xsl:otherwise></xsl:choose></td>
266 |                       <td><xsl:value-of select="service/cpe"/></td>
267 |                     </tr>
268 |                   </xsl:for-each>
269 |                 </xsl:for-each>
270 |               </tbody>
271 |             </table>
272 |           </div>
273 | 
274 |           <h2 id="webservices" class="target">Web Services</h2>
275 |           <div class="table-responsive">
276 |             <table id="web-services" class="table table-striped dataTable" role="grid">
277 |               <thead >
278 |                 <tr>
279 |                   <!--<th title="Temporary Checkbox"></th>-->
280 |                   <th>Hostname</th>
281 |                   <th>Address</th>
282 |                   <th>Port</th>
283 |                   <th>Service</th>
284 |                   <th>Produkt</th>
285 |                   <th>Version</th>
286 |                   <th>Title</th>
287 |                   <th>SSL Certificate</th>
288 |                   <th>URL</th>
289 |                 </tr>
290 |               </thead>
291 |               <tbody>
292 |                 <xsl:for-each select="/nmaprun/host">
293 |                   <xsl:for-each select="ports/port[starts-with(service/@name, 'http') and state/@state='open' and @protocol='tcp']">
294 | 
295 |                     <tr>
296 |                       <!--<td><input name="select_all" value="1" type="checkbox"></input></td>-->
297 |                       <td>
298 |                       <xsl:if test="count(../../hostnames/hostname) = 0">N/A</xsl:if>
299 |                       <xsl:if test="count(../../hostnames/hostname) > 0"><xsl:value-of select="../../hostnames/hostname/@name"/></xsl:if></td>
300 |                       <td><a>
301 |                       <xsl:attribute name="href">#onlinehosts-<xsl:value-of select="translate(../../address/@addr, '.', '-')"/></xsl:attribute><xsl:value-of select="../../address/@addr"/></a></td>
302 |                       
303 |                       <td><a>
304 |                       <!--PORT-->
305 |                       <xsl:attribute name="href">#port-<xsl:value-of select="translate(../../address/@addr, '.', '-')"/>-<xsl:value-of select="@portid"/></xsl:attribute><xsl:value-of select="@portid"/></a></td>
306 |                       <!--Service-->
307 |                       <td><xsl:if test="count(service/@tunnel) > 0"><xsl:value-of select="service/@tunnel"/>/</xsl:if><xsl:value-of select="service/@name"/></td>
308 |                       <td><xsl:value-of select="service/@product"/></td>
309 |                       <td><xsl:value-of select="service/@version"/></td>
310 |                       <!--Title-->
311 |                       <td><xsl:choose><xsl:when test="count(script[@id='http-title']/elem[@key='title']) > 0"><i><xsl:value-of select="script[@id='http-title']/elem[@key='title']"/></i></xsl:when><xsl:otherwise><xsl:if test="count(script[@id='http-title']/@output) > 0"><i><xsl:value-of select="script[@id='http-title']/@output"/></i></xsl:if></xsl:otherwise></xsl:choose></td>
312 |                       <!--SSL Cert-->
313 |                       <td>
314 |                         <xsl:if test="count(script/table[@key='subject']/elem[@key='commonName']) > 0">CN: <i><xsl:value-of select="script/table[@key='subject']/elem[@key='commonName']"/></i></xsl:if>
315 |                         <xsl:if test="count(script/table[@key='validity']/elem[@key='notAfter']) > 0"><br/>Expiry: <i><xsl:value-of select="script/table[@key='validity']/elem[@key='notAfter']"/></i></xsl:if>
316 |                         <xsl:if test="count(script/elem[@key='sig_algo']) > 0"><br/>SigAlgo: <i><xsl:value-of select="script/elem[@key='sig_algo']"/></i></xsl:if>
317 |                       </td>
318 |                       <!--URL-->
319 |                       <xsl:choose>
320 |                         <!-- when SSL -->
321 |                         <xsl:when test="count(service/@tunnel) > 0 or service/@name = 'https' or service/@name = 'https-alt'">
322 |                               <td>
323 |                                 <xsl:if test="count(../../hostnames/hostname) > 0"><a target="_blank" href="https://{../../hostnames/hostname/@name}:{@portid}"><xsl:value-of select="actionUrl"/>https://<xsl:value-of select="../../hostnames/hostname/@name"/>:<xsl:value-of select="@portid"/></a></xsl:if>
324 |                                 <xsl:if test="count(../../hostnames/hostname) = 0"><a target="_blank" href="https://{../../address/@addr}:{@portid}"><xsl:value-of select="actionUrl"/>https://<xsl:value-of select="../../address/@addr"/>:<xsl:value-of select="@portid"/></a></xsl:if>
325 |                               </td>
326 |                         </xsl:when>
327 |                         <!-- when not SSL -->
328 |                         <xsl:otherwise>
329 |                               <td>
330 |                                 <xsl:if test="count(../../hostnames/hostname) > 0"><a target="_blank" href="http://{../../hostnames/hostname/@name}:{@portid}"><xsl:value-of select="actionUrl"/>http://<xsl:value-of select="../../hostnames/hostname/@name"/>:<xsl:value-of select="@portid"/></a></xsl:if>
331 |                                 <xsl:if test="count(../../hostnames/hostname) = 0"><a target="_blank" href="http://{../../address/@addr}:{@portid}"><xsl:value-of select="actionUrl"/>http://<xsl:value-of select="../../address/@addr"/>:<xsl:value-of select="@portid"/></a></xsl:if>
332 |                               </td>
333 |                         </xsl:otherwise>
334 |                     </xsl:choose>
335 | 
336 |                     </tr>
337 |                   </xsl:for-each>
338 |                 </xsl:for-each>
339 |               </tbody>
340 |             </table>
341 |           </div>
342 | 
343 |           <h2 id="onlinehosts" class="target">Online Hosts</h2>
344 |           <xsl:for-each select="/nmaprun/host[status/@state='up']">
345 |             <div class="panel panel-default">
346 |               <div class="panel-heading clickable" data-toggle="collapse">
347 |                   <xsl:attribute name="id">onlinehosts-<xsl:value-of select="translate(address/@addr, '.', '-')"/></xsl:attribute>
348 |                   <xsl:attribute name="data-target">#<xsl:value-of select="translate(address/@addr, '.', '-')"/></xsl:attribute>
349 |                 <h3 class="panel-title"><xsl:value-of select="address/@addr"/><xsl:if test="count(hostnames/hostname) > 0"> - <xsl:value-of select="hostnames/hostname/@name"/></xsl:if></h3>
350 |               </div>
351 |               <div class="panel-body collapse in">
352 |                 <xsl:attribute name="id"><xsl:value-of select="translate(address/@addr, '.', '-')"/></xsl:attribute>
353 |                 <xsl:if test="count(hostnames/hostname) > 0">
354 |                   <h4>Hostnames</h4>
355 |                   <ul>
356 |                     <xsl:for-each select="hostnames/hostname">
357 |                       <li><xsl:value-of select="@name"/> (<xsl:value-of select="@type"/>)</li>
358 |                     </xsl:for-each>
359 |                   </ul>
360 |                 </xsl:if>
361 |                 <h4>Ports</h4>
362 |                 <div class="table-responsive">
363 |                   <table class="table table-bordered">
364 |                     <thead>
365 |                       <tr>
366 |                         <th>Port</th>
367 |                         <th>Protocol</th>
368 |                         <th>State<br/>Reason</th>
369 |                         <th>Service</th>
370 |                         <th>Product</th>
371 |                         <th>Version</th>
372 |                         <th>Extra Info</th>
373 |                       </tr>
374 |                     </thead>
375 |                     <tbody>
376 |                       <xsl:for-each select="ports/port">
377 |                         <xsl:choose>
378 |                           <xsl:when test="state/@state = 'open'">
379 |                             <tr class="success">
380 |                               <td title="Port"><xsl:attribute name="id">port-<xsl:value-of select="translate(../../address/@addr, '.', '-')"/>-<xsl:value-of select="@portid"/></xsl:attribute><xsl:value-of select="@portid"/></td>
381 |                               <td title="Protocol"><xsl:value-of select="@protocol"/></td>
382 |                               <td title="State / Reason"><xsl:value-of select="state/@state"/><br/><xsl:value-of select="state/@reason"/></td>
383 |                               <td title="Service"><xsl:if test="count(service/@tunnel) > 0"><xsl:value-of select="service/@tunnel"/>/</xsl:if><xsl:value-of select="service/@name"/></td>
384 |                               <td title="Product"><xsl:value-of select="service/@product"/></td>
385 |                               <td title="Version"><xsl:value-of select="service/@version"/></td>
386 |                               <td title="Extra Info"><xsl:value-of select="service/@extrainfo"/></td>
387 |                             </tr>
388 |                             <tr>
389 |                               <td colspan="7">
390 |                                 <a><xsl:attribute name="href">https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=<xsl:value-of select="service/cpe"/></xsl:attribute><xsl:value-of select="service/cpe"/></a>
391 |                                 <xsl:for-each select="script">
392 |                                   <h5><xsl:value-of select="@id"/></h5>
393 |                                   <pre style="white-space:pre-wrap; word-wrap:break-word;"><xsl:value-of select="@output"/></pre>
394 |                                 </xsl:for-each>
395 |                               </td>
396 |                             </tr>
397 |                           </xsl:when>
398 |                           <xsl:when test="state/@state = 'filtered'">
399 |                             <tr class="warning">
400 |                               <td><xsl:value-of select="@portid"/></td>
401 |                               <td><xsl:value-of select="@protocol"/></td>
402 |                               <td><xsl:value-of select="state/@state"/><br/><xsl:value-of select="state/@reason"/></td>
403 |                               <td><xsl:value-of select="service/@name"/></td>
404 |                               <td><xsl:value-of select="service/@product"/></td>
405 |                               <td><xsl:value-of select="service/@version"/></td>
406 |                               <td><xsl:value-of select="service/@extrainfo"/></td>
407 |                             </tr>
408 |                           </xsl:when>
409 |                           <xsl:when test="state/@state = 'closed'">
410 |                             <tr class="active">
411 |                               <td><xsl:value-of select="@portid"/></td>
412 |                               <td><xsl:value-of select="@protocol"/></td>
413 |                               <td><xsl:value-of select="state/@state"/><br/><xsl:value-of select="state/@reason"/></td>
414 |                               <td><xsl:value-of select="service/@name"/></td>
415 |                               <td><xsl:value-of select="service/@product"/></td>
416 |                               <td><xsl:value-of select="service/@version"/></td>
417 |                               <td><xsl:value-of select="service/@extrainfo"/></td>
418 |                             </tr>
419 |                           </xsl:when>
420 |                           <xsl:otherwise>
421 |                             <tr class="info">
422 |                               <td><xsl:value-of select="@portid"/></td>
423 |                               <td><xsl:value-of select="@protocol"/></td>
424 |                               <td><xsl:value-of select="state/@state"/><br/><xsl:value-of select="state/@reason"/></td>
425 |                               <td><xsl:value-of select="service/@name"/></td>
426 |                               <td><xsl:value-of select="service/@product"/></td>
427 |                               <td><xsl:value-of select="service/@version"/></td>
428 |                               <td><xsl:value-of select="service/@extrainfo"/></td>
429 |                             </tr>
430 |                           </xsl:otherwise>
431 |                         </xsl:choose>
432 |                       </xsl:for-each>
433 |                     </tbody>
434 |                   </table>
435 |                 </div>
436 |                 <xsl:if test="count(hostscript/script) > 0">
437 |                   <h4>Host Script</h4>
438 |                 </xsl:if>
439 |                 <xsl:for-each select="hostscript/script">
440 |                   <h5><xsl:value-of select="@id"/></h5>
441 |                   <pre style="white-space:pre-wrap; word-wrap:break-word;"><xsl:value-of select="@output"/></pre>
442 |                 </xsl:for-each>
443 |                 <xsl:if test="count(os/osmatch) > 0">
444 |                   <h4>OS Detection</h4>
445 |                   <xsl:for-each select="os/osmatch">
446 |                     <h5>OS details: <xsl:value-of select="@name"/> (<xsl:value-of select="@accuracy"/>%)</h5>
447 |                     <xsl:for-each select="osclass">
448 |                       Device type: <xsl:value-of select="@type"/><br/>
449 |                       Running: <xsl:value-of select="@vendor"/><xsl:text> </xsl:text><xsl:value-of select="@osfamily"/><xsl:text> </xsl:text><xsl:value-of select="@osgen"/> (<xsl:value-of select="@accuracy"/>%)<br/>
450 |                       OS CPE: <a><xsl:attribute name="href">https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=<xsl:value-of select="cpe"/></xsl:attribute><xsl:value-of select="cpe"/></a>
451 |                       <br/>
452 |                     </xsl:for-each>
453 |                     <br/>
454 |                   </xsl:for-each>
455 |                 </xsl:if>
456 |               </div>
457 |             </div>
458 |           </xsl:for-each>
459 |         </div>
460 |         <footer class="footer">
461 |           <div class="container">
462 |             <p class="text-muted">
463 |               This report was generated by or with the help of <a href="https://pentestfactory.com">Pentest Factory GmbH</a>.<br/>
464 |               If you have questions or problems do not hesitate <a href="mailto:team@pentestfactory.de">contacting us</a>.<br/><br/>
465 |               <span class="glyphicon glyphicon-heart" style="color: #de1d0b;"></span> Bootstrap Template by <a href="https://github.com/honze-net/nmap-bootstrap-xsl" target="_blank">Andreas Hontzia</a><br/>
466 |               <span class="glyphicon glyphicon-heart" style="color: #de1d0b;"></span> Tweaks and Extensions by <a href="https://github.com/l4rm4nd">LRVT</a>
467 |             </p>
468 |           </div>
469 |         </footer>
470 | 
471 |         <script>
472 |           $(document).ready(function() {
473 |             $('#table-services').DataTable();
474 |             $("a[href^='#onlinehosts-']").click(function(event){     
475 |                 event.preventDefault();
476 |                 $('html,body').animate({scrollTop:($(this.hash).offset().top-60)}, 500);
477 |             });
478 |           });
479 |           $('#table-services').DataTable( {
480 |             "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
481 |             "order": [[ 0, 'desc' ]],
482 |             "columnDefs": [
483 |               { "targets": [0], "orderable": true },
484 |               { "targets": [1], "type": "ip-address" },
485 |             ],
486 |             dom:'lBfrtip', 
487 |             stateSave: true,
488 |             buttons: [
489 |                 {
490 |                     extend: 'copyHtml5',
491 |                     exportOptions: { orthogonal: 'export' }
492 |                 },
493 |                 {
494 |                     extend: 'csvHtml5',
495 |                     exportOptions: { orthogonal: 'export' }
496 |                 },
497 |                 {
498 |                     extend: 'excelHtml5',
499 |                     exportOptions: { orthogonal: 'export' },
500 |                     autoFilter: true,
501 |                     title: '',
502 |                 },
503 |                 {
504 |                     extend: 'pdfHtml5',
505 |                     orientation: 'landscape',
506 |                     pageSize: 'LEGAL',
507 |                     download: 'open',
508 |                     exportOptions: {
509 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
510 |                     }
511 |                 }
512 |             ],
513 |           });
514 |         </script>
515 |         <script>      
516 |           $(document).ready(function() {
517 |             $('#web-services').DataTable();
518 |           });
519 |           $('#web-services').DataTable( {
520 |             "lengthMenu": [ [10, 25, 50, 100, -1], [10, 25, 50, 100, "All"] ],
521 |             "order": [[ 0, 'desc' ]],
522 |             "columnDefs": [
523 |               { "targets": [0], "orderable": true },
524 |               { "targets": [1], "type": "ip-address" },
525 |             ],
526 |             dom:'lBfrtip', 
527 |             stateSave: true,
528 |             buttons: [
529 |                 {
530 |                     extend: 'copyHtml5',
531 |                     exportOptions: { orthogonal: 'export' }
532 |                 },
533 |                 {
534 |                     extend: 'csvHtml5',
535 |                     exportOptions: { orthogonal: 'export' }
536 |                 },
537 |                 {
538 |                     extend: 'excelHtml5',
539 |                     exportOptions: { orthogonal: 'export' },
540 |                     autoFilter: true,
541 |                     title: '',
542 |                 },
543 |                 {
544 |                     extend: 'pdfHtml5',
545 |                     orientation: 'landscape',
546 |                     pageSize: 'LEGAL',
547 |                     download: 'open',
548 |                     exportOptions: {
549 |                       columns: [ 0,1,2,3,4,5,6,7,8 ]
550 |                     }
551 |                 }
552 |             ],
553 |           });
554 |         </script>      
555 |         <script>
556 |           $(document).ready(function() {
557 |             $('#table-overview').DataTable();
558 |           });
559 |           $('#table-overview').DataTable( {
560 |             "lengthMenu": [ [5, 10, 25, 50, 100, -1], [5, 10, 25, 50, 100, "All"] ],
561 |             "columnDefs": [
562 |               { "targets": [1], "type": "ip-address" },
563 |             ],
564 |           });
565 |         </script>
566 |       </body>
567 |     </html>
568 |   </xsl:template>
569 | </xsl:stylesheet>
570 | 


--------------------------------------------------------------------------------