Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there a tool that allow the sharing of nmap scan results ? I know nmap can produce XML and I can easily convert them in HTML.

I would like to know if there is a tool with more features. For example, an online web page that would give users an UI to compare two different scan results from the same host taken at different time. Another feature could draw the network topology and automatically make an html page.

I know that nmap-sql and pbnj can export results in a MySQL database, but I think there is no front-end available to play with the database.

share|improve this question
2  
whatever happened to grep, awk and sed? –  lynks Apr 16 '13 at 17:58
    
@lynks the problem with grep, awk and sed is that these tools are not user friendly enough. My other team members need to be able to easily view and compare the results. –  Francois Valiquette Apr 16 '13 at 18:03
    
I don't think this is worth turning into an answer, but there exists a largely abandoned SourceForge project for this called InProtect. Care to revive? –  Scott Pack Apr 17 '13 at 16:12
add comment

3 Answers

One great product I like to use is Nessus.

Nessus has plugins available to both import existing nmap scan results and launch nmap scans directly. I like the reporting features of the tool which will output a nice PDF report for you.

See this link for more information.

Another alternative I like to use is the Metasploit framework. While renowned as an exploit framework, my favorite function of Metasploit is actually it's database. I use it to gather the results of my various scans and other activities during a penetration test. You can import nmap and other scans into the framework and view the information in it there. It doesn't have a pretty interface, but it's functional and works well.

Both the tools I mentioned might be a little heavy to use just as a nmap scan viewer. For something a little more lightweight, just share the results in the human readable output in something like Dropbox, not as pretty but just as functional.

You mention features like automatically drawing network maps based on scans. The zenmap GUI utility, usually packaged with the official nmap distribution actually has that feature. I have not used it extensively but you might want to give it a shot.

For comparison of two different scans of the same host, try ndiff, which again comes packaged with the official nmap install.

share|improve this answer
    
I guess you could use some of the msframework utilities to present nmap logs but isn't that kind of like swatting a fly with a howitzer? –  grauwulf Apr 16 '13 at 15:03
    
@grauwulf Sure, but I have never found myself in the middle ground where I need something different. It's either a large project where I have to do multiple scans, in which case the msframework works wonders, or a small enough one where I just dump the files in a directory and use CLI tools like ndiff. –  Terry Chia Apr 16 '13 at 15:08
    
fair enough :-) –  grauwulf Apr 16 '13 at 15:11
    
Thank you for your answer, I really like it! The problem with Nessus free edition is that it does not allow scanning more than 16 IP. I am doing security contests/competitions such as Defcon and I do not have a lot of money (I am a student). I will try what you mentioned above. I will keep you updated. Thank you –  Francois Valiquette Apr 16 '13 at 17:55
add comment

Nmap's XML output contains a reference to a stylesheet that is shipped with Nmap (and also available here. The output is nicely displayed, but does not offer many interactive features.

A better option is Martin Holst Swende's Nmap onepage resultviewer, which offers searching and filtering.

If you don't need a web/HTML option, try Nmap's own Zenmap front-end. It's Python-GTK, and works well on Windows and Linux. It does network topology drawings (exportable as SVG or PNG) and scan diffing.

If you have the programming chops to write your own web app in Python, the Zenmap libraries are powerful and fairly easy to use. Also, Ndiff has a better parser class. Ndiff is what Zenmap uses to do diffing, and it also be used as a Python library.

Finally, lots of tools can import Nmap XML and could probably offer some of the features you're looking for. Nessus, Metasploit, OpenVAS are a few.

share|improve this answer
add comment

You may find nmap-web ( http://www.komar.org/pres/nmap-web/ ) to be useful. At first blush it actually might be just the ticket for your use case. It's a simple web interface for nmap that lets you do just about* everything you would do from the command line. One thing to be careful of is distributed processing. If, for example, you're breaking up a large IP range into chunks to be processed across multiple nmap instances then you will have to do a bit of fancy configuration.

Best of luck.

(*) It looks like the source is available for this simple perl script in case you want to customize it to your needs.

share|improve this answer
    
I will give it a try, thanks! –  Francois Valiquette Apr 16 '13 at 17:59
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.