Perl Nmap处理脚本

xiaochuan

　　在老外网上找到的。这个脚本真的是及时雨，解决了我的一些难题。



#!/usr/bin/perl
# Created by Paul Haas: phaas <AT> redspin <DOT> com
# Licensed under a NMAP Compatible License (GNU GPL v2)
# Dual licensed under the Fyodor may-use-as-he-pleases license
use Nmap::Parser;
use Socket; # For inet_aton
use DBI;
use strict;
use vars qw( $PROG );
( $PROG = $0 ) =~ s/^.*[\/\\]//;    # Truncate calling path from the prog name

main:
{   
if ($#ARGV == -1){usage();exit(1);}
my $xmlfile = $ARGV[0];
my $dbfile = '';
if (!defined($ARGV[1])) {$dbfile='nmap.db';} else {$dbfile=$ARGV[1];}
my $dbh = createTables($dbfile);
nmap_info($dbh,$xmlfile);
$dbh->commit();
# Output from our Database
db_output($dbh);   
$dbh->disconnect;
exit(0);
}
sub usage {
print "Usage: $PROG nmap.xml {optional db name}\n";
print "\tConverts a NMAP Compatible XML File to a SQLite3 Database\n";
exit;
}
sub createTables {
my $dbfile = shift;
print "# Writing Database to '$dbfile'.\n";
# PrintError => 0 Prevents message by table recreation
my $dbargs = {PrintError => 0,RaiseError => 0,AutoCommit => 0};
my $dbh = DBI->connect("dbi:SQLite:$dbfile","","",$dbargs) or
die $DBI::errstr;
my $id_type = "INTEGER PRIMARY KEY AUTOINCREMENT";
# Information about the Scan
eval {
$dbh->do(
"CREATE TABLE nmap (
sid $id_type,
version TEXT,
xmlversion TEXT,
args TEXT,
types TEXT,
starttime INTEGER,
startstr TEXT,
endtime INTEGER,
endstr TEXT,
numservices INTEGER)"
);
};        
# Information about Hosts
eval {
$dbh->do(
"CREATE TABLE hosts (
sid INTEGER,
hid $id_type,
ip4 TEXT,
ip4num INTEGER,           
hostname TEXT,
status TEXT,   
tcpcount INTEGER,
udpcount INTEGER,                 
mac TEXT,
vendor TEXT,
ip6 TEXT,            
distance INTEGER,
uptime TEXT,
upstr TEXT)"
);
};                    
# Sequence Information (Used for OS Detection)
eval {
$dbh->do(
"CREATE TABLE sequencing (
hid INTEGER,
tcpclass TEXT,
tcpindex TEXT,
tcpvalues TEXT,
ipclass TEXT,
ipvalues TEXT,
tcptclass TEXT,
tcptvalues TEXT)"
);
};   
# Port Information, including both TCP and UDP as indicated by 'type'   
eval {
$dbh->do(
"CREATE TABLE ports (
hid INTEGER,
port INTEGER,
type TEXT,
state TEXT,
name TEXT,
tunnel TEXT,
product TEXT,
version TEXT,
extra TEXT,
confidence INTEGER,
method TEXT,
proto TEXT,  
owner TEXT,         
rpcnum TEXT,
fingerprint TEXT)"
);
};
# OS Information
eval {
$dbh->do(
"CREATE TABLE os (
hid INTEGER,
name TEXT,
family TEXT,
generation TEXT,
type TEXT,
vendor TEXT,
accuracy INTEGER)"
);
};
return $dbh;   
}
sub nmap_info {
my ($dbh,$xmlfile) = @_;
print "# Reading from NMAP XML File '$xmlfile'.\n";
my $np = new Nmap::Parser;
$np->parsefile("$xmlfile"); # $name
my $sth = $dbh->selectrow_hashref("SELECT max(sid) as msid FROM nmap");   
my $sid = $sth->{"msid"};
if (!defined($sid)) {$sid = 0;}
else {$sid++;}
my $session = $np->get_session();   
my $insert = $dbh->prepare('INSERT INTO nmap VALUES (?,?,?,?,?,?,?,?,?,?)');
my $success = $insert->execute(
$sid,
$session->nmap_version(),
$session->xml_version(),
$session->scan_args(),
join(',',$session->scan_types()),
$session->start_time(),
$session->start_str(),
$session->finish_time(),
$session->time_str(),
$session->numservices()        
);
my $sth = $dbh->selectrow_hashref("SELECT MAX(hid) as mhid from hosts");
my $hid = $sth->{'mhid'};
if (!defined($hid)) {$hid = 0;}
else {$hid++;}
for my $host ($np->all_hosts()) {
my $os_sig = $host->os_sig();        
my $insert = $dbh->prepare('INSERT INTO hosts VALUES
(?,?,?,?,?,?,?,?,?,?,?,?,?,?)');
my $success = $insert->execute(
$sid,
$hid,
$host->ipv4_addr(),   
unpack('N', inet_aton($host->ipv4_addr())),   
#$host->hostname(),
join(',',$host->all_hostnames()),
$host->status(),                        
$host->tcp_port_count(),
$host->udp_port_count(),
$host->mac_addr(),   
$host->mac_vendor(),
$host->ipv6_addr(),
$host->distance(),
$host->uptime_seconds(),
$host->uptime_lastboot()            
);
my $insert = $dbh->prepare('INSERT INTO sequencing VALUES
(?,?,?,?,?,?,?,?)');
my $success = $insert->execute(   
$hid,
$host->tcpsequence_class(),
$host->tcpsequence_index(),
$host->tcpsequence_values(),
$host->ipidsequence_class(),
$host->ipidsequence_values(),
$host->tcptssequence_class(),
$host->tcptssequence_values()        
);
for (my $index = 0; $index < $os_sig->class_count(); $index++){            
my $insert = $dbh->prepare('INSERT INTO os VALUES (?,?,?,?,?,?,?)');
my $success = $insert->execute(   
$hid,   
$os_sig->name($index),
$os_sig->osfamily($index),
$os_sig->osgen($index),               
$os_sig->type($index),
$os_sig->vendor($index),            
$os_sig->name_accuracy($index)               
);        
}
for my $tcp ($host->tcp_ports()){
my $service = $host->tcp_service($tcp);
my $insert = $dbh->prepare('INSERT INTO ports VALUES
(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)');            
my $success = $insert->execute(
$hid,
$service->port(),
'tcp',
$host->tcp_port_state($tcp),
$service->name(),
$service->tunnel(),
$service->product(),
$service->version(),
$service->extrainfo(),
$service->confidence(),               
$service->method(),
$service->proto(),        
$service->owner(),        
$service->rpcnum(),
$service->fingerprint()
);            
}
for my $udp ($host->udp_ports()){        
my $service = $host->udp_service($udp);
my $insert = $dbh->prepare('INSERT INTO ports VALUES
(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)');   
my $success = $insert->execute(
$hid,
$service->port(),
'udp',
$host->udp_port_state($udp),
$service->name(),
$service->product(),
$service->version(),
$service->extrainfo(),
$service->confidence(),
$service->owner(),
$service->method(),
$service->proto(),
$service->tunnel(),
$service->rpcnum(),
$service->fingerprint()
);            
}
$hid++;
}
}
sub db_output {
my $dbfile = shift;
my $sqlcmd = 'select case when hostname != "" then ip4 || " (" || hostname || ")" else ip4 end as iph, port || "/" || type as pt, case when tunnel != "" then name || " (" || tunnel || ")" else name end as nt, product || " " || version || " " || extra from hosts, ports using (hid) where state="open" order by ip4num, port';
my $sth;
$sth = $dbfile->prepare($sqlcmd) or die "Can not prepare SQL statement '$sqlcmd': ". $DBI::errstr;   
$sth->execute or die "Can not execute SQL statement '$sqlcmd': " . $DBI::errstr;
print "# Outputting Database with: '$sqlcmd'.\n";
my $a;
my @row;
while (@row = $sth->fetchrow_array()) {
print join("\t",@row) ."\n";
}
}