Screenshots

Features

Comprehensive Nmap XML Parsing

• Multiple File Support: Parse and analyze two Nmap XML output files.
• Structured Data: Converts Nmap’s XML output into a structured format for further processing.

Comparative Analysis

• Change Detection: Compare results from two Nmap scans to identify new, altered, or removed services and ports. Useful for when you scan the same IPs from different source IPs or over time.
• Excel Reporting: Automatically generates detailed Excel spreadsheets with the comparison results and some stats.

Statistical Overview And Visualization

• Network Exposure Statistics: Offers statistical analysis on detected services and open ports.
• Excel Visualizations: Includes pie charts in Excel reports for a graphical representation of the network’s security posture.

AI-Powered Insights With GPT

• GPT Report Generation: Uses OpenAI’s GPT to generate insightful analysis reports based on Nmap result stats. The tool uses a hardcoded prompt that sets the tone and requirements, then the script inserts the stats (no identifying information is provided) and if -c –context has been provided, it’ll add the context to the bottom of the prompt.
• Customizable Context: Enhance GPT analysis by providing additional context, tailoring the report to specific needs.

Usage

The script prints the help page if no args are passed, or you can access with python nmap-analysis.py -h

• Comparing Nmap Scans:

python nmap-analysis.py compare -ff (--first-nmap-file) path/to/first.xml -lf (--last-nmap-file) path/to/second.xml

• Generating a GPT Report:

python nmap-analysis.py gpt-report -gf (--gpt-nmap-file) path/to/nmap.xml -c (--context) "Your optional context here"

Installation and Setup

Prerequisites

• 3.10+ probably (created using 3.12)
• An OpenAI API key for GPT report generation that is set in local env

Secure Installation with venv

1. Clone the Repository:

git clone https://github.com/FlyingPhish/Nmap-Analysis
cd nmap-analysis-tool

2. Create a Virtual Environment:

python3 -m venv venv

3. Activate the Virtual Environment:

• On Windows:

.\venv\Scripts\activate

The post Nmap Analysis Tool – Enhancing Network Security Through Advanced Analysis And Reporting appeared first on Tech Chronicles.

Astsu: Network Scanning Tool

Astsu performs three major tasks. The first function is the ability to scan common ports and check whether they are open or not. If a port is open, the tool will then use nmap to check the service being run on the port. The second ability of Astsu is to discover hosts operating on the network. It does this by using the routers IP to map all possible IP’s and then send packets to each IP and wait for a response. The last objective which Astsu achieves is the ability to determine the Operating System of a host on a network. It does this by analyzing a packet received from the target for the OS details.

A great option of this tool is that the user can choose the network protocol to use in the scan. In addition to this, the user can also define how long the tool should wait before it timeouts.

Features:

• Perform basic network reconnaissance with this tool
• Scan the ports of a target IP address and check which ports are open or closed and what services are running on them
• Discover the hosts in a network
• Scan a host for the Operating System
• Can be used in the reconnaissance phase of a penetration test
• Option to use a stealth scan method to hide the user’s identity
• Option to scan a range of ports or scan all the ports

How it works

• Scan common ports

Send a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports found.

• Discover hosts in network

Uses as a base the router’s ip to map all possible ips. It then sends an ICMP packet to each IP, and waits for a response, if it receives any response saved in an array the IP of the online host, and when it finishes checking all hosts, prints all hosts online.

• OS Scan

Sends an ICMP packet to the destination and waits for a response. Then, extracts the TTL from the destination response and checks the possible OS in a list, if have founded, prints it.

OS Support

• Windows
• Linux
• Mac

How to install

Clone this repository git clone https://github.com/ReddyyZ/astsu.git

• Install python 3.
  • Linux
    • apt-get install python3
    • chmod +x *
    • python3 -m pip install -r requirements.txt
    • python3 install.py
    • Done!
  • Windows
    • Python 3, download and install
    • python3 -m pip install -r requirements.txt
    • python3 install.py
    • Done!

Arguments

• -sC | Scan common ports
  • -p | Protocol to use in the scan
  • -i | Interface to use
  • -t | Timeout to each request
  • -st | Use stealth scan method (TCP)
• -sA | Scan all ports
  • -p | Protocol to use in the scan
  • -i | Interface to use
  • -t | Timeout to each request
  • -st | Use stealth scan method (TCP)
• -sP | Scan a range ports
  • -p | Protocol to use in the scan
  • -i | Interface to use
  • -t | Timeout to each request
  • -st | Use stealth scan method (TCP)
• -sO | Scan OS of a target
• -d | Discover hosts in the network
  • -p | Protocol to use in the scan
  • -i | Interface to use

Examples

• Discover hosts

astsu -d

• Scan common ports using SYN Scan

astsu -sC -st 192.168.1.1

• Scan a range of ports

astsu 192.168.1.1 -sP 1 443

• Scan OS

astsu -sO 192.168.1.1

License

This project is under the MIT License.

The post Astsu: Network Scanning Tool appeared first on Tech Chronicles.