Skip to content

Commit 4d5d372

Browse files
add support for script, table, elem elements
1 parent 8b82702 commit 4d5d372

File tree

9 files changed

+165
-8
lines changed

9 files changed

+165
-8
lines changed

Diff for: .gitignore

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
/target/
22
/.classpath
33
/.project
4-
/.settings/
4+
/.settings/
5+
/bin/
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
package de.martinspielmnann.nmapxmlparser.elements;
2+
3+
public record Elem(String key, String value) {
4+
}
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,5 @@
11
package de.martinspielmnann.nmapxmlparser.elements;
22

3-
public record ExtraPorts(String filtered, Long count, ExtraReasons extraReasons) {}
3+
import java.util.List;
4+
5+
public record ExtraPorts(String filtered, Long count, List<ExtraReasons> extraReasons) {}
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
package de.martinspielmnann.nmapxmlparser.elements;
22

3-
public record Port(String protocol, Long portId, State state, Service service) {
3+
import java.util.List;
4+
5+
public record Port(String protocol, Long portId, State state, Service service, List<Script> scripts) {
46
}
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
package de.martinspielmnann.nmapxmlparser.elements;
2+
3+
import java.util.List;
4+
5+
public record Script(String id, String output, List<Elem> elems, List<Table> tables) {
6+
}
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
package de.martinspielmnann.nmapxmlparser.elements;
2+
3+
import java.util.List;
4+
5+
public record Table(String key, List<Elem> elems, List<Table> tables) {
6+
}

Diff for: src/main/java/de/martinspielmnann/nmapxmlparser/internal/XmlParser.java

+61-5
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515

1616
import de.martinspielmnann.nmapxmlparser.elements.Address;
1717
import de.martinspielmnann.nmapxmlparser.elements.Debugging;
18+
import de.martinspielmnann.nmapxmlparser.elements.Elem;
1819
import de.martinspielmnann.nmapxmlparser.elements.ExtraPorts;
1920
import de.martinspielmnann.nmapxmlparser.elements.ExtraReasons;
2021
import de.martinspielmnann.nmapxmlparser.elements.Finished;
@@ -33,9 +34,11 @@
3334
import de.martinspielmnann.nmapxmlparser.elements.Ports;
3435
import de.martinspielmnann.nmapxmlparser.elements.RunStats;
3536
import de.martinspielmnann.nmapxmlparser.elements.ScanInfo;
37+
import de.martinspielmnann.nmapxmlparser.elements.Script;
3638
import de.martinspielmnann.nmapxmlparser.elements.Service;
3739
import de.martinspielmnann.nmapxmlparser.elements.State;
3840
import de.martinspielmnann.nmapxmlparser.elements.Status;
41+
import de.martinspielmnann.nmapxmlparser.elements.Table;
3942
import de.martinspielmnann.nmapxmlparser.elements.TcpSequence;
4043
import de.martinspielmnann.nmapxmlparser.elements.TcpTsSequence;
4144
import de.martinspielmnann.nmapxmlparser.elements.Times;
@@ -189,8 +192,11 @@ protected static ExtraPorts parseExtraPorts(Element el) {
189192
validateNodeName(el, "extraports");
190193
var countString = el.getAttribute("count");
191194
var count = Long.parseLong(countString);
192-
var extraReasonsElement = getSingleChildElement(el, "extrareasons");
193-
var extraReasons = parseExtraReasons(extraReasonsElement);
195+
var extraReasons = new ArrayList<ExtraReasons>();
196+
var extraReasonsElement = el.getElementsByTagName("extrareasons");
197+
for (int j = 0; j < extraReasonsElement.getLength(); j++) {
198+
extraReasons.add(parseExtraReasons((Element) extraReasonsElement.item(j)));
199+
}
194200
return new ExtraPorts(el.getAttribute("filtered"), count, extraReasons);
195201
}
196202

@@ -226,11 +232,61 @@ private static Port parsePort(Element el) {
226232
return null;
227233
}
228234
validateNodeName(el, "port");
229-
var portIdString = el.getAttribute("portid");
230-
var portId = Long.parseLong(portIdString);
235+
var portId = Long.parseLong(el.getAttribute("portid"));
231236
var stateElement = getSingleChildElement(el, "state");
232237
var serviceElement = getSingleChildElement(el, "service");
233-
return new Port(el.getAttribute("protocol"), portId, parseState(stateElement), parseService(serviceElement));
238+
var scriptElement = el.getElementsByTagName("script");
239+
var scripts = new ArrayList<Script>();
240+
for (int i = 0; i < scriptElement.getLength(); i++) {
241+
scripts.add(parseScript((Element) scriptElement.item(i)));
242+
}
243+
return new Port(el.getAttribute("protocol"), portId, parseState(stateElement), parseService(serviceElement),
244+
scripts);
245+
}
246+
247+
private static Script parseScript(Element el) {
248+
if (el == null) {
249+
return null;
250+
}
251+
validateNodeName(el, "script");
252+
var elems = new ArrayList<Elem>();
253+
var elemElement = el.getElementsByTagName("elem");
254+
for (int i = 0; i < elemElement.getLength(); i++) {
255+
elems.add(parseElem((Element) elemElement.item(i)));
256+
}
257+
var tables = new ArrayList<Table>();
258+
var tableElement = el.getElementsByTagName("table");
259+
for (int i = 0; i < tableElement.getLength(); i++) {
260+
tables.add(parseTable((Element) tableElement.item(i)));
261+
}
262+
263+
return new Script(el.getAttribute("id"), el.getAttribute("output"), elems, tables);
264+
}
265+
266+
private static Table parseTable(Element el) {
267+
if (el == null) {
268+
return null;
269+
}
270+
validateNodeName(el, "table");
271+
var elems = new ArrayList<Elem>();
272+
var elemElement = el.getElementsByTagName("elem");
273+
for (int i = 0; i < elemElement.getLength(); i++) {
274+
elems.add(parseElem((Element) elemElement.item(i)));
275+
}
276+
var tables = new ArrayList<Table>();
277+
var tableElement = el.getElementsByTagName("table");
278+
for (int i = 0; i < tableElement.getLength(); i++) {
279+
tables.add(parseTable((Element) tableElement.item(i)));
280+
}
281+
return new Table(el.getAttribute("key"), elems, tables);
282+
}
283+
284+
private static Elem parseElem(Element el) {
285+
if (el == null) {
286+
return null;
287+
}
288+
validateNodeName(el, "elem");
289+
return new Elem(el.getAttribute("key"), el.getTextContent());
234290
}
235291

236292
private static OS parseOS(Element el) {

Diff for: src/test/java/de/martinspielmnann/nmapxmlparser/internal/XmlParserTest.java

+9
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,15 @@ void testParseHostAddress() throws ParserConfigurationException, SAXException, I
4141
assertEquals("8.8.8.8", nmapRun.hosts().get(0).address().addr());
4242
}
4343

44+
@Test
45+
void testParseScriptKey() throws ParserConfigurationException, SAXException, IOException {
46+
NmapRun nmapRun = XmlParser.parse(getXmlOutputWithScript());
47+
assertEquals("FourOhFourRequest",
48+
nmapRun.hosts().get(0).ports().ports().get(1).scripts().get(0).elems().get(0).key());
49+
assertEquals("dns.google",
50+
nmapRun.hosts().get(0).ports().ports().get(1).scripts().get(2).tables().get(0).elems().get(0).value());
51+
}
52+
4453
@Test
4554
void testParseOsClassCpe() throws ParserConfigurationException, SAXException, IOException {
4655
NmapRun nmapRun = XmlParser.parse(getXmlOutputWithOs());

Diff for: src/test/resources/nmap-output-with-vulns.xml

+71
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<!DOCTYPE nmaprun>
3+
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
4+
<!-- Nmap 7.92 scan initiated Wed May 18 18:44:30 2022 as: nmap -&#45;script
5+
vuln -oX nmap-output-with-vulns.xml example.com -->
6+
<nmaprun scanner="nmap"
7+
args="nmap -&#45;script vuln -oX nmap-output-with-vulns.xml example.com"
8+
start="1652892270" startstr="Wed May 18 18:44:30 2022" version="7.92"
9+
xmloutputversion="1.05">
10+
<scaninfo type="syn" protocol="tcp" numservices="1000"
11+
services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389" />
12+
<verbose level="0" />
13+
<debugging level="0" />
14+
<hosthint>
15+
<status state="up" reason="unknown-response" reason_ttl="0" />
16+
<address addr="93.184.216.34" addrtype="ipv4" />
17+
<hostnames>
18+
<hostname name="example.com" type="user" />
19+
</hostnames>
20+
</hosthint>
21+
<host starttime="1652892282" endtime="1652893051">
22+
<status state="up" reason="reset" reason_ttl="55" />
23+
<address addr="93.184.216.34" addrtype="ipv4" />
24+
<hostnames>
25+
<hostname name="example.com" type="user" />
26+
</hostnames>
27+
<ports>
28+
<extraports state="filtered" count="996">
29+
<extrareasons reason="no-response" count="996"
30+
proto="tcp"
31+
ports="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79,81-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,444-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389" />
32+
</extraports>
33+
<port protocol="tcp" portid="80">
34+
<state state="open" reason="syn-ack" reason_ttl="57" />
35+
<service name="http" method="table" conf="3" />
36+
<script id="http-csrf"
37+
output="Couldn&apos;t find any CSRF vulnerabilities." />
38+
<script id="http-stored-xss"
39+
output="Couldn&apos;t find any stored XSS vulnerabilities." />
40+
<script id="http-dombased-xss"
41+
output="Couldn&apos;t find any DOM based XSS." />
42+
</port>
43+
<port protocol="tcp" portid="443">
44+
<state state="open" reason="syn-ack" reason_ttl="55" />
45+
<service name="https" method="table" conf="3" />
46+
<script id="http-stored-xss"
47+
output="Couldn&apos;t find any stored XSS vulnerabilities." />
48+
<script id="http-dombased-xss"
49+
output="Couldn&apos;t find any DOM based XSS." />
50+
<script id="http-csrf"
51+
output="Couldn&apos;t find any CSRF vulnerabilities." />
52+
</port>
53+
<port protocol="tcp" portid="1119">
54+
<state state="closed" reason="reset" reason_ttl="57" />
55+
<service name="bnetgame" method="table" conf="3" />
56+
</port>
57+
<port protocol="tcp" portid="1935">
58+
<state state="closed" reason="reset" reason_ttl="55" />
59+
<service name="rtmp" method="table" conf="3" />
60+
</port>
61+
</ports>
62+
<times srtt="129613" rttvar="19825" to="208913" />
63+
</host>
64+
<runstats>
65+
<finished time="1652893051"
66+
timestr="Wed May 18 18:57:31 2022"
67+
summary="Nmap done at Wed May 18 18:57:31 2022; 1 IP address (1 host up) scanned in 780.54 seconds"
68+
elapsed="780.54" exit="success" />
69+
<hosts up="1" down="0" total="1" />
70+
</runstats>
71+
</nmaprun>

0 commit comments

Comments
 (0)