[{"_1":2,"_154":-5,"_155":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_133":134},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_124":-5,"_125":11,"_126":17,"_127":11,"_128":-5,"_129":11,"_130":-5,"_131":132},"canonicalUrl","https://hub.docker.com/r/oneyx/webmap/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","oneyx","reponame","webmap","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2019-08-28T05:41:03.350393Z","description","","is_private","last_updated","2019-08-28T08:45:44.77351Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1211,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n
\nA Web Dashbord for Nmap XML Report \n

\n\n## Table Of Contents\n- [Usage](#usage)\n- [Video](#video)\n- [Features](#features)\n- [PDF Report](#pdf-report)\n- [XML Filenames](#xml-filenames)\n- [CVE and Exploits](#cve-and-exploits)\n- [Network View](#network-view)\n- [RESTful API](#restful-api)\n- [Third Parts](#third-parts)\n- [Security Issues](#security-issues)\n- [Contributors](#contributors)\n- [Contacts](#contacts)\n\n\n## Screenshot\n

\n
\n\n## Usage\nYou should use this with docker, just by sending this command:\n```bash\n$ mkdir /tmp/webmap\n$ docker run -d \\\n --name webmap \\\n -h webmap \\\n -p 8000:8000 \\\n -v /tmp/webmap:/opt/xml \\\n rev3rse/webmap\n\n$ # now you can run Nmap and save the XML Report on /tmp/webmap\n$ nmap -sT -A -T4 -oX /tmp/webmap/myscan.xml 192.168.1.0/24\n```\nNow point your browser to http://localhost:8000\n\n### Generate new token\nIn order to access to the WebMap dashboard, you need a token. You can create a new token with:\n```bash\n$ docker exec -ti webmap /root/token\n```\n\n### Quick and Dirty\n```bash\n$ curl -sL http://bit.ly/webmapsetup | bash\n```\n\n### Upgrade from previous release\n```bash\n$ # stop running webmap container\n$ docker stop webmap\n\n$ # remove webmap container\n$ docker rm webmap\n\n$ # pull new image from dockerhub\n$ docker pull rev3rse/webmap\n\n$ # run WebMap\n$ curl -sL http://bit.ly/webmapsetup | bash\n```\n\n### Run without Docker\nThis project is designed to run on a Docker container. IMHO it isn't a good idea to run this on a custom Django installation, \nbut if you need it you can find all building steps inside the [Dockerfile](https://github.com/Rev3rseSecurity/WebMap/blob/v2.1/master/docker/Dockerfile).\n\n## Video\nThe HTML template changes often. This video could not be up to date with the latest version.\n\nVersion v2.3:
\ncoming soon...
\n
\nHackerSploit Video about WebMap v2.2:
\n[![HackerSploit](https://img.youtube.com/vi/SoEIDNnOCGY/0.jpg)](https://www.youtube.com/watch?v=SoEIDNnOCGY)\n
\nOfficial Video of v2.1:
\n[![WebMap v2.1](https://img.youtube.com/vi/TujtG1Ki0TQ/0.jpg)](https://www.youtube.com/watch?v=TujtG1Ki0TQ)\n\n\n## Features\n- Import and parse Nmap XML files\n- Run and Schedule Nmap Scan from dashboard\n- Statistics and Charts on discovered services, ports, OS, etc...\n- Inspect a single host by clicking on its IP address\n- Attach labels on a host\n- Insert notes for a specific host\n- Create a PDF Report with charts, details, labels and notes\n- Copy to clipboard as Nikto, Curl or Telnet commands\n- Search for CVE and Exploits based on CPE collected by Nmap\n- RESTful API\n\n## Roadmap for v2.3x\nYou love WebMap and you know python? We need your help! This is what we want deploy for the v2.3:\n- [todo] Improve template: try to define better the html template and charts\n- [todo] Improve API: create a documentation/wiki about it\n- [todo] Wiki: create WebMap User Guide on GitHub\n- [working] Authentication or something that could blocks access to WebMap if != localhost\n- [working] Scan diff: show difference between two scheduled nmap scan report\n- [todo] Zaproxy: Perform web scan using the OWASP ZAP API\n\n## Changes on v2.2\n- fixed bug on missing services\n- Run nmap from WebMap\n- Schedule nmap run\n- Add custom NSE scripts section\n\n## Changes on v2.1\n- Better usage of Django template\n- Fixed some Nmap XML parse problems\n- Fixed CVE and Exploit collecting problems\n- Add new Network View\n- Add RESTful API\n\n## PDF Report\n![WebMap](https://i.imgur.com/alWZix9.png)\n\n## XML Filenames\nWhen creating the PDF version of the Nmap XML Report, the XML filename is used as document title on the first page. \nWebMap will replace some parts of the filename as following:\n\n- `_` will replaced by a space (` `)\n- `.xml` will be removed\n\nExample: `ACME_Ltd..xml`
\nPDF title: `ACME Ltd.`\n\n## CVE and Exploits\nthanks to the amazing API services by circl.lu, WebMap is able to looking for CVE and Exploits for each CPE collected by Nmap. \nNot all CPE are checked over the circl.lu API, but only when a specific version is specified \n(for example: `cpe:/a:microsoft:iis:7.5` and not `cpe:/o:microsoft:windows`).\n\n## Network View\n![WebMap](https://i.imgur.com/j77jQz9.png)\n\n## RESTful API\nFrom `v2.1` WebMap has a RESTful API frontend that makes users able to query their scan files with something like:\n\n```bash\ncurl -s 'http://localhost:8000/api/v1/scan?token='\n\n \"webmap_version\": \"v2.1/master\",\n \"scans\": {\n \"scanme.nmap.org.xml\": {\n \"filename\": \"scanme.nmap.org.xml\",\n \"startstr\": \"Sun Nov 4 16:22:46 2018\",\n \"nhost\": \"1\",\n \"port_stats\": {\n \"open\": 42,\n \"closed\": 0,\n \"filtered\": 0\n }\n },\n \"hackthebox.xml\": {\n \"filename\": \"hackthebox.xml\",\n \"startstr\": \"Mon Oct 8 20:56:32 2018\",\n \"nhost\": \"256\",\n \"port_stats\": {\n \"open\": 67,\n \"closed\": 0,\n \"filtered\": 2\n }\n }\n }\n}\n```\n\nA user can get information about a single scan by append to the URL the XML filename:\n\n```bash\ncurl -v 'http://localhost:8000/api/v1/scan/hackthebox.xml?token='\n\n{\n \"file\": \"hackthebox.xml\",\n \"hosts\": {\n \"10.10.10.2\": {\n \"hostname\": {},\n \"label\": \"\",\n \"notes\": \"\"\n },\n \"10.10.10.72\": {\n \"hostname\": {\n \"PTR\": \"streetfighterclub.htb\"\n },\n \"label\": \"\",\n \"notes\": \"\"\n },\n \"10.10.10.76\": {\n \"hostname\": {},\n \"label\": \"\",\n \"notes\": \"\"\n },\n \"10.10.10.77\": {\n \"hostname\": {},\n \"label\": \"Vulnerable\",\n \"notes\": \"PHNwYW4gY2xhc3M9ImxhYmVsIGdyZWVuIj5SRU1FRElBVElPTjwvc3Bhbj4gVXBncmFkZSB0byB0aGUgbGF0ZXN0IHZlcnNpb24g\"\n },\n...\n```\n\nand he can get all information about a single host by append the IP address to URL:\n\n```bash\ncurl -v 'http://localhost:8000/api/v1/scan/hackthebox.xml/10.10.10.87?token='\n\n \"file\": \"hackthebox.xml\",\n \"hosts\": {\n \"10.10.10.87\": {\n \"ports\": [\n {\n \"port\": \"22\",\n \"name\": \"ssh\",\n \"state\": \"open\",\n \"protocol\": \"tcp\",\n \"reason\": \"syn-ack\",\n \"product\": \"OpenSSH\",\n \"version\": \"7.5\",\n \"extrainfo\": \"protocol 2.0\"\n },\n {\n \"port\": \"80\",\n \"name\": \"http\",\n \"state\": \"open\",\n \"protocol\": \"tcp\",\n \"reason\": \"syn-ack\",\n \"product\": \"nginx\",\n \"version\": \"1.12.2\",\n \"extrainfo\": \"\"\n },\n {\n \"port\": \"8888\",\n \"name\": \"sun-answerbook\",\n \"state\": \"filtered\",\n \"protocol\": \"tcp\",\n \"reason\": \"no-response\",\n \"product\": \"\",\n \"version\": \"\",\n \"extrainfo\": \"\"\n }\n ],\n \"hostname\": {},\n \"label\": \"Checked\",\n \"notes\": \"\",\n \"CVE\": [\n {\n \"Modified\": \"2018-08-17T15:29:00.253000\",\n \"Published\": \"2018-08-17T15:29:00.223000\",\n \"cvss\": \"5.0\",\n \"cwe\": \"CWE-200\",\n \"exploit-db\": [\n {\n \"description\": \"OpenSSH 7.7 - Username Enumeration. CVE-2018-15473. Remote exploit for Linux platform\",\n \"file\": \"exploits/linux/remote/45233.py\",\n \"id\": \"EDB-ID:45233\",\n \"last seen\": \"2018-08-21\",\n \"modified\": \"2018-08-21\",\n \"platform\": \"linux\",\n \"port\": \"\",\n \"published\": \"2018-08-21\",\n \"reporter\": \"Exploit-DB\",\n \"source\": \"https://www.exploit-db.com/download/45233/\",\n \"title\": \"OpenSSH 7.7 - Username Enumeration\",\n \"type\": \"remote\"\n },\n {\n \"id\": \"EDB-ID:45210\"\n }\n ],\n \"id\": \"CVE-2018-15473\",\n \"last-modified\": \"2018-11-02T06:29:06.993000\",\n \"metasploit\": [\n...\n```\n\n## Third Parts\n- [Django](https://www.djangoproject.com)\n- [Materialize CSS](https://materializecss.com)\n- [Clipboard.js](https://clipboardjs.com)\n- [Chart.js](https://www.chartjs.org)\n- [Wkhtmltopdf](https://wkhtmltopdf.org)\n- [API cve.circl.lu](https://cve.circl.lu)\n- [vis.js](http://visjs.org/)\n\n## Security Issues\nThis app is not intended to be exposed to the internet, but to be used as localhost web application. Please, **DO NOT expose** this app to the internet, use your localhost or, \nin case you can't do it, take care to filter who and what can access to WebMap with a firewall rule or something like that. \nExposing this app to the whole internet could lead not only to a stored XSS but also to a leakage of sensitive/critical/private \ninformations about your port scan. Please, be smart.\n\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",746403169,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},"content_type","creator",565944,"full_size",746393160,"id",67025902,"images",[97],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},"architecture","amd64","digest","sha256:628e350c8e7589050d6359549518dca13ef31d185011e902bb4e0dd5e579d536","features","last_pulled","2026-09-22T20:39:13.1720836Z","last_pushed","2019-08-28T08:45:45Z","os","linux","os_features","os_version","size","variant","2019-08-28T08:45:44.461001Z","last_updater","last_updater_username","media_type","latest","repository",7614901,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":135,"_142":143,"_131":152,"_153":11},{"_36":136,"_38":137,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":138,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":139,"_75":11,"_76":141,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":140},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_144":60,"_145":-5,"_146":-5,"_147":148},"count","next","previous","results",[149],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":150,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},[151],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},[],"canDeleteTags","actionData","errors"]

oneyx/webmap

Tags for oneyx/webmap