Skip to content

Commit

Permalink
----
Browse files Browse the repository at this point in the history
  • Loading branch information
@royrusso
royrusso committed Dec 9, 2024
1 parent 39c4de5 commit 1b4c004
Show file tree
Hide file tree
Showing 3 changed files with 48 additions and 114 deletions.
3 changes: 2 additions & 1 deletion backend/scan/nmap.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -108,13 +108,14 @@ def get_scan_command(self):
"-oX",
"-",
]
case ScanTypesEnum.DETAILED: # TCP SYN scan
case ScanTypesEnum.DETAILED: # TCP SYN scan nmap -sS --min-rate 2000 -oX -
flags = ["-sS", "--min-rate", "2000", "-oX", "-"]
case ScanTypesEnum.OS: # Enable OS detection only
flags = ["-sS", "-O", "--min-rate", "2000", "-oX", "-"]
case ScanTypesEnum.LIST: # List scan sudo nmap -sL 192.168.1.200-210
flags = ["-sL", "-oX", "-"]
case ScanTypesEnum.VULN: # Probe open ports to determine service/version info and vuln scan
# nmap --script vulners -sV -O --min-rate 2000 -oX -
flags = [
"--script",
"vulners",
Expand Down
98 changes: 40 additions & 58 deletions frontend/src/routes/home.tsx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -8,17 +8,16 @@ import {
Row,
Toast,
} from "react-bootstrap";
import { fetchIPList, fetchPingData } from "../services/Client";
import { IPListToRange } from "../utils/IPUtils";
import { fetchDetailedData, fetchPingData } from "../services/Client";

const Home = () => {
const [scanFormData, setScanFormData] = useState({
ipAddress: "",
scanType: "full",
scanType: "",
});
const [validated, setValidated] = useState(false);
const [showToast, setShowToast] = useState(false);

const [results, setResults] = useState<any[]>([]);
const [scanFormToastMessage, setScanFormToastMessage] = useState("");

const handleChange = (e: { target: { id: any; value: any } }) => {
Expand Down Expand Up @@ -50,60 +49,39 @@ const Home = () => {
`Scan started for IP Address(es): ${scanFormData.ipAddress}`
);

// const result = doFullScan(scanFormData.ipAddress);

let ipList = fetchIPList(scanFormData.ipAddress);
ipList.then((data) => {
console.log("IP List: ", data);
if (data.length === 0) {
console.log("No IP Address found in the given range");
return;
}

// get host IP object
const hosts = data.result.nmaprun.host;

console.log("Hosts: ", hosts);

// divide hosts into chunks of 10 for parallel scanning
const chunkSize = 10;
const chunkedHosts = [];
for (let i = 0; i < hosts.length; i += chunkSize) {
chunkedHosts.push(hosts.slice(i, i + chunkSize));
}

console.log("Chunked Hosts: ", chunkedHosts);

// for each chunk, convert the IP list to IP range and scan in parallel
chunkedHosts.forEach((chunk: any) => {
const ipRange = IPListToRange(
chunk.map((host: any) => host.address["@addr"])
);
console.log("IP Range: ", ipRange);

fetchPingData(ipRange)
.then((data) => {
console.log("Ping Data: ", data);

// Sometimes host is missing, if all IPs are down.
if ("host" in data.result.nmaprun) {
const hosts = data.result.nmaprun.host;

// hosts can be an array, when multiple hosts are up. Otherwise, it's an object.
if (hosts.isArray) {
hosts.forEach((host: any) => {
console.log("Host: ", host);
});
} else {
console.log("Host: ", hosts);
}
}
})
.finally(() => {
console.log("Ping scan completed");
});
const fetchScanData = async (ipRange: string) => {
console.log("Scanning IP Range: ", ipRange);
let scanData = await fetchPingData(ipRange);
setResults((prevResults) => [...prevResults, scanData]);
return scanData;
};

const response = fetchScanData(scanFormData.ipAddress);
response
.then((data) => {
console.log("Ping Data: ", data);

// Sometimes host is missing, if all IPs are down.
if ("host" in data.result.nmaprun) {
const hosts = data.result.nmaprun.host;

// hosts can be an array, when multiple hosts are up. Otherwise, it's an object.
if (hosts.isArray) {
hosts.forEach((host: any) => {
console.log("Host UP: ", host);
});
} else {
console.log("Host UP: ", hosts);
}
}
})
.then(() => {
// TODO: only scan hosts that are up
const response_detailed = fetchDetailedData(scanFormData.ipAddress);
response_detailed.then((data) => {
console.log("Detailed Data: ", data);
});
});
});
};

return (
Expand Down Expand Up @@ -133,9 +111,13 @@ const Home = () => {
<Form.Select
id="scanType"
size="sm"
defaultValue="full"
defaultValue=""
value={scanFormData.scanType}
onChange={handleChange}
>
<option value="" disabled>
Select a Scan Profile...
</option>
<option value="full">Full Vulnerability Scan</option>
<option value="ping">Ping Scan</option>
<option>Detailed Scan</option>
Expand Down
61 changes: 6 additions & 55 deletions frontend/src/services/Client.ts
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,3 @@
import { IPListToRange } from "../utils/IPUtils";

export const BASE_URI = import.meta.env.VITE_API_URL;

export const fetchPingData = async (ip_arg: string) => {
Expand All @@ -8,61 +6,14 @@ export const fetchPingData = async (ip_arg: string) => {
return data;
};

export const fetchIPList = async (ip_arg: string) => {
const response = await fetch(`${BASE_URI}/scan/list/${ip_arg}`);
export const fetchDetailedData = async (ip_arg: string) => {
const response = await fetch(`${BASE_URI}/scan/detailed/${ip_arg}`);
const data = await response.json();
return data;
};

const doFullScan = async (ip_arg: string) => {
let ipList = fetchIPList(ip_arg);
ipList.then((data) => {
console.log("IP List: ", data);
if (data.length === 0) {
console.log("No IP Address found in the given range");
return;
}

// get host IP object
const hosts = data.result.nmaprun.host;

console.log("Hosts: ", hosts);

// divide hosts into chunks of 10 for parallel scanning
const chunkSize = 10;
const chunkedHosts = [];
for (let i = 0; i < hosts.length; i += chunkSize) {
chunkedHosts.push(hosts.slice(i, i + chunkSize));
}

console.log("Chunked Hosts: ", chunkedHosts);

// for each chunk, convert the IP list to IP range and scan in parallel
chunkedHosts.forEach((chunk: any) => {
const ipRange = IPListToRange(
chunk.map((host: any) => host.address["@addr"])
);
console.log("IP Range: ", ipRange);

fetchPingData(ipRange).then((data) => {
console.log("Ping Data: ", data);

// Sometimes host is missing, if all IPs are down.
if ("host" in data.result.nmaprun) {
const hosts = data.result.nmaprun.host;

// hosts can be an array, when multiple hosts are up. Otherwise, it's an object.
if (hosts.isArray) {
hosts.forEach((host: any) => {
console.log("Host: ", host);
});
} else {
console.log("Host: ", hosts);
}
}
});
});
});
export const fetchIPList = async (ip_arg: string) => {
const response = await fetch(`${BASE_URI}/scan/list/${ip_arg}`);
const data = await response.json();
return data;
};

export default doFullScan;

0 comments on commit 1b4c004

Please sign in to comment.