Unspecific

nmap-wrapper Version 1.3 released

I’m back…

OK, I have made a few simple updates to nmap-wrapper.  There are 3 new command line options that also adds a new feature.  First one is -o to pass what nmap command line options you want to include in each scan.  This allows you to use a single nmap wrapper script for multiple scheduled scan types.  The second new option is the -p for where to put the PID file.  Default location is /usr/local/var/run/wrapper.pid  This file is not just the parrent pid, but reports each of the child processes. The third option is the log directory.  This is the directory all the flat files used to store the data for each host is stored.  Right now the default file naming convention is <log_dir>/YYYYMMDD-X.X.X.<format>.  It stores all the log formats, nmap, gnmap and XML.  X.X.X is the first 3 octets in the IP, so each file can contain 1 class C.  I changed the format from MMDDYYYY with this release so all the other nmap-tools will be updated soon as well.

Here is an example of the new PID file:

# cat /usr/local/var/run/wrapper.pid
WRAPPER: 23194
CHILD: 23210 192.168.100.6
CHILD: 23202 192.168.100.3
CHILD: 23205 192.168.100.4
CHILD: 23197 192.168.100.1
CHILD: 23195 192.168.100.0
CHILD: 23219 192.168.100.9
CHILD: 23216 192.168.100.8
CHILD: 23207 192.168.100.5
CHILD: 23199 192.168.100.2
CHILD: 23222 192.168.100.10
CHILD: 23211 192.168.100.7

I am also releasing a web interface to manage the scan processes.  This will have the ability to stop any individual scan.  It will use this file to know which process to kill.  The parent process will continue running and just launch the next scan.

New Usage Output:

./nmap-wrapper.pl

 : nmap-wrapper v1.3 - MadHat (at) Unspecific.com
 : http://infosec.unspecific.com/

./nmap-wrapper.pl < -hav > -i <filename> |  -l <host_list> \
         [ -n <num_children>] [-p <pid_file> ] [ -o "<nmap options>" ] \\
         [ -L <log_dir> ]
         options:

  -h   help (this stuff)
  -v   verbose - will add details
  -l   network list in comma delimited form: a.b.c.d/M,e.f.g.h/x.y.z.M
  -i   input file containing network list, one network per line
  -n   max number of children to fork
  -o   nmap options to send to each child process
         it is expecting the "" around the options
         Default Options:  -O -sT -F
  -p   PID file, lists the currently running processes and their state
        default location is /usr/local/var/run/wrapper.pid
  -L   Log file dir.  This is where scan results are stored
        default location is /usr/local/var/log/nmap/