|
1 | | -# NmapView |
2 | | - |
3 | | -[](https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl) |
4 | | -[](https://github.com/dreizehnutters/NmapView/actions/workflows/report-html-regression.yml) |
5 | | -[](https://möbius.band/report.html) |
6 | | -[](https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl) |
7 | | -[](https://github.com/dreizehnutters/NmapView/releases/) |
8 | | - |
9 | | -**Stop staring at raw XML. Get instant, interactive insights.** |
10 | | - |
11 | | -NmapView transforms flat Nmap XML into a **single, portable, interactive HTML dashboard** for analysis and triage. |
12 | | - |
13 | | - |
14 | | -> No backend, no database, and no reporting pipeline required. Open it locally amd review hosts, open services, service variants, and visualizations in one file. Share it, export from it, or archive it. |
15 | | -
|
16 | | - |
17 | | -<p align="center"> |
18 | | - <a href="https://möbius.band/report.html"> |
19 | | - <img src="./.github/assets/sample.gif" alt="Report Screenshot"/> |
20 | | - </a> |
21 | | -</p> |
22 | | - |
23 | | -<p align="center"> |
24 | | - <a target="_blank" href="https://möbius.band/report.html">> Open Demo Report <</a> |
25 | | -</p> |
26 | | - |
27 | | -<p align="center"> |
28 | | - <a target="_blank" href="https://möbius.band/blog/nmapview/">> Blog Post <</a> |
29 | | -</p> |
30 | | - |
31 | | -## Quick Start |
32 | | - |
33 | | -Render any existing Nmap XML file in seconds using `xsltproc` (pre-installed on most Linux/macOS systems): |
34 | | - |
35 | | -```bash |
36 | | -# 1. Download the latest stylesheet |
37 | | -curl -fsSL -o NmapView.xsl https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl |
38 | | - |
39 | | -# 2. Transform your scan |
40 | | -xsltproc -o report.html NmapView.xsl scan.xml |
41 | | -``` |
42 | | - |
43 | | -Open the generated HTML file in your browser. |
44 | | - |
45 | | - |
46 | | -### Optional: Convenience Mode |
47 | | - |
48 | | -As an alternative to `xsltproc`, you can transform Nmap XML files directly in your browser using NmapView. |
49 | | - |
50 | | -NmapView Web Transformer → [https://möbius.band/proc/](https://möbius.band/proc/) |
51 | | - |
52 | | -> Nmap XML data is processed entirely client-side. No network transmission of scan data. |
53 | | -
|
54 | | -## Why Try It |
55 | | - |
56 | | -- Turn raw XML into a report you can read and share without extra tooling |
57 | | -- Review hosts, open services, service variants, and host details in one place |
58 | | -- Search, sort, highlight, and export data to find "low-hanging fruit" |
59 | | -- Visualize technical scan data into insightful plots |
60 | | -- Keep the result as one portable HTML file |
61 | | - |
62 | | -## Core Features |
63 | | - |
64 | | -- Single-file interactive HTML output |
65 | | -- Searchable, sortable tables |
66 | | -- Export to CSV, Excel, and JSON |
67 | | -- Global keyword highlighting |
68 | | -- Portable output you can share or archive |
69 | | - |
70 | | -## Report Sections |
71 | | - |
72 | | -- **Host Overview**: Triage hosts by IP, hostname, vendor, OS guess, open TCP/UDP port counts or service rarity. |
73 | | -- **Host Scope**: Keep or exclude visible hosts and recalculate downstream tables, exports, and plots against only that selected subset. |
74 | | -- **Open Services**: Review exposed services across hosts with versions, extra info, CPEs lookup links via [CVEHunter](https://cve.pentestfactory.de/), and Vulners-linked context. |
75 | | -- **Service Summary**: Group service and NSE output by service, port, product, and version so repeated software, web stacks, and unusual variants stand out across hosts. |
76 | | -- **Host Details**: Drill into each host scanned ports and corresponding complete script output |
77 | | - |
78 | | -## Visualizations |
79 | | - |
80 | | -- **Open Ports Per Host**: Compare exposure across systems at a glance. |
81 | | -- **Operating System Distribution**: See which OS families dominate the environment and where platform diversity or concentration stands out. |
82 | | -- **Service Distribution Across Hosts**: See which services are most widespread and which appear on only a few hosts. |
83 | | -- **Host-Service Relationships**: See which services are shared across hosts and which are isolated. |
84 | | -- **Host-Port Matrix**: See which ports appear on which hosts and spot unusual exposure patterns. |
85 | | -- **Service-Port Heatmap**: Confirm expected port usage and spot unusual service-to-port combinations. |
86 | | - |
87 | | - |
88 | | -## Requirements |
89 | | - |
90 | | -- `xsltproc` to transform XML into HTML |
91 | | - |
92 | | -No Python, Node, or backend required. |
93 | | - |
94 | | -## Typical Use Cases |
95 | | - |
96 | | -- Internal network assessments |
97 | | -- External attack surface reviews |
98 | | -- Pentest evidence packaging |
99 | | -- Asset and service inventory review |
100 | | -- Comparing repeated service exposure across hosts |
101 | | -- Sharing scan results with engineers, clients, or internal stakeholders |
102 | | -- Reviewing large scans without working through raw XML |
103 | | - |
104 | | -## For Contributors |
105 | | - |
106 | | -PRs are welcome. |
107 | | - |
108 | | -- `xsl/`: split XSL source |
109 | | -- `tools/`: build helper, checks, and local XML fixtures |
110 | | - |
111 | | -Build the standalone stylesheet with: |
112 | | - |
113 | | -```bash |
114 | | -python3 tools/build_xsl.py |
115 | | -``` |
116 | | - |
117 | | -## Feedback |
118 | | - |
119 | | -If the project is useful and saved you an hour of manual grepping today, star it. Open an issue for bugs, UX friction, or feature requests. |
120 | | - |
121 | | -## Acknowledgment & Credits |
122 | | - |
123 | | -Special thanks to the foundations laid by: |
124 | | - |
125 | | -- [honze-net](https://github.com/honze-net) for [nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) |
126 | | -- [Haxxnet](https://github.com/Haxxnet) for [nmap-bootstrap-xsl](https://github.com/Haxxnet/nmap-bootstrap-xsl) |
| 1 | +# NmapView |
| 2 | + |
| 3 | +[](https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl) |
| 4 | +[](https://github.com/dreizehnutters/NmapView/actions/workflows/report-html-regression.yml) |
| 5 | +[](https://möbius.band/report.html) |
| 6 | +[](https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl) |
| 7 | +[](https://github.com/dreizehnutters/NmapView/releases/) |
| 8 | + |
| 9 | +**Stop staring at raw XML. Get instant, interactive insights.** |
| 10 | + |
| 11 | +NmapView transforms flat Nmap XML into a **single, portable, interactive HTML dashboard** for analysis and triage. |
| 12 | + |
| 13 | + |
| 14 | +> No backend, no database, and no reporting pipeline required. Open it locally amd review hosts, open services, service variants, and visualizations in one file. Share it, export from it, or archive it. |
| 15 | +
|
| 16 | + |
| 17 | +<p align="center"> |
| 18 | + <a href="https://möbius.band/report.html"> |
| 19 | + <img src="./.github/assets/sample.gif" alt="Report Screenshot"/> |
| 20 | + </a> |
| 21 | +</p> |
| 22 | + |
| 23 | +<p align="center"> |
| 24 | + <a target="_blank" href="https://möbius.band/report.html">> Open Demo Report <</a> |
| 25 | +</p> |
| 26 | + |
| 27 | +<p align="center"> |
| 28 | + <a target="_blank" href="https://möbius.band/blog/nmapview/">> Blog Post <</a> |
| 29 | +</p> |
| 30 | + |
| 31 | +## Quick Start |
| 32 | + |
| 33 | +Render any existing Nmap XML file in seconds using `xsltproc` (pre-installed on most Linux/macOS systems): |
| 34 | + |
| 35 | +```bash |
| 36 | +# 1. Download the latest stylesheet |
| 37 | +curl -fsSL -o NmapView.xsl https://github.com/dreizehnutters/NmapView/releases/latest/download/NmapView.xsl |
| 38 | + |
| 39 | +# 2. Transform your scan |
| 40 | +xsltproc -o report.html NmapView.xsl scan.xml |
| 41 | +``` |
| 42 | + |
| 43 | +Open the generated HTML file in your browser. |
| 44 | + |
| 45 | +### Optional: convenience Mode |
| 46 | + |
| 47 | +As an alternative to `xsltproc`, you can transform Nmap XML files directly in your browser using NmapView. |
| 48 | + |
| 49 | +NmapView Web Transformer → [https://möbius.band/proc/](https://möbius.band/proc/) |
| 50 | + |
| 51 | +> Nmap XML data is processed entirely client-side. No network transmission of scan data. |
| 52 | +
|
| 53 | +## Why Try It |
| 54 | + |
| 55 | +- Turn raw XML into a report you can read and share without extra tooling |
| 56 | +- Review hosts, open services, service variants, and host details in one place |
| 57 | +- Search, sort, highlight, and export data to find "low-hanging fruit" |
| 58 | +- Visualize technical scan data into insightful plots |
| 59 | +- Keep the result as one portable HTML file |
| 60 | + |
| 61 | +## Core Features |
| 62 | + |
| 63 | +- Single-file interactive HTML output |
| 64 | +- Searchable, sortable tables |
| 65 | +- Export to CSV, Excel, and JSON |
| 66 | +- Global keyword highlighting |
| 67 | +- Portable output you can share or archive |
| 68 | + |
| 69 | +## Report Sections |
| 70 | + |
| 71 | +- **Host Overview**: Triage hosts by IP, hostname, vendor, OS guess, open TCP/UDP port counts or service rarity. |
| 72 | +- **Host Scope**: Keep or exclude visible hosts and recalculate downstream tables, exports, and plots against only that selected subset. |
| 73 | +- **Open Services**: Review exposed services across hosts with versions, extra info, CPEs lookup links via [CVEHunter](https://cve.pentestfactory.de/), and Vulners-linked context. |
| 74 | +- **Service Summary**: Group service and NSE output by service, port, product, and version so repeated software, web stacks, and unusual variants stand out across hosts. |
| 75 | +- **Host Details**: Drill into each host scanned ports and corresponding complete script output |
| 76 | + |
| 77 | +## Visualizations |
| 78 | + |
| 79 | +- **Open Ports Per Host**: Compare exposure across systems at a glance. |
| 80 | +- **Operating System Distribution**: See which OS families dominate the environment and where platform diversity or concentration stands out. |
| 81 | +- **Service Distribution Across Hosts**: See which services are most widespread and which appear on only a few hosts. |
| 82 | +- **Host-Service Relationships**: See which services are shared across hosts and which are isolated. |
| 83 | +- **Host-Port Matrix**: See which ports appear on which hosts and spot unusual exposure patterns. |
| 84 | +- **Service-Port Heatmap**: Confirm expected port usage and spot unusual service-to-port combinations. |
| 85 | + |
| 86 | + |
| 87 | +## Requirements |
| 88 | + |
| 89 | +- `xsltproc` to transform XML into HTML |
| 90 | + |
| 91 | +No Python, Node, or backend required. |
| 92 | + |
| 93 | +## Typical Use Cases |
| 94 | + |
| 95 | +- Internal network assessments |
| 96 | +- External attack surface reviews |
| 97 | +- Pentest evidence packaging |
| 98 | +- Asset and service inventory review |
| 99 | +- Comparing repeated service exposure across hosts |
| 100 | +- Sharing scan results with engineers, clients, or internal stakeholders |
| 101 | +- Reviewing large scans without working through raw XML |
| 102 | + |
| 103 | +## For Contributors |
| 104 | + |
| 105 | +PRs are welcome. |
| 106 | + |
| 107 | +- `xsl/`: split XSL source |
| 108 | +- `tools/`: build helper, checks, and local XML fixtures |
| 109 | + |
| 110 | +Build the standalone stylesheet with: |
| 111 | + |
| 112 | +```bash |
| 113 | +python3 tools/build_xsl.py |
| 114 | +``` |
| 115 | + |
| 116 | +## Feedback |
| 117 | + |
| 118 | +If the project is useful and saved you an hour of manual grepping today, star it. Open an issue for bugs, UX friction, or feature requests. |
| 119 | + |
| 120 | +## Acknowledgment & Credits |
| 121 | + |
| 122 | +Special thanks to the foundations laid by: |
| 123 | + |
| 124 | +- [honze-net](https://github.com/honze-net) for [nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) |
| 125 | +- [Haxxnet](https://github.com/Haxxnet) for [nmap-bootstrap-xsl](https://github.com/Haxxnet/nmap-bootstrap-xsl) |
0 commit comments