Skip to content

Importing nmap XML uses addresses rather than hostnames #75

@ben-elttam

Description

@ben-elttam

If you import XML results from an nmap scan, scrying will iterate through open ports and addresses, but makes the connection to the IP address rather than to the hostname, which can matter to web servers for serving the right domain (e.g. virtual hosts). It can also matter for TLS SNI, loadbalancers, etc. and other middleware that can route requests differently).

The nmap XML contains the hostname but this information is ignored.

It would be nice to have the option to do prefer hostnames, and to optionally be able to iterate both hostnames and address.

The nmap XML contains extra information like subject alternative names from certificates as well. But extracting this may be getting too out of scope.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions