From 5658ed15cd2673432bbd81da401892328cf3a65a Mon Sep 17 00:00:00 2001
From: Sab0tag3d <sabotaged@protonmail.com>
Date: Wed, 28 Aug 2019 22:45:24 +0300
Subject: [PATCH] Create new parse filter

The same out as with http-ports but with hostnames
+ -sV Nmap's option output analyse

Example:
http://www.bank.ru:80
http://ddd.bank.ru:8080
http://ddd.www.bank.ru:80
http://bank.ru:80
http://www.bank.ru:8088
https://WWW.bank.ru:8443
https://login.bank.ru:443
https://logindemo.bank.ru:443

It can be helpful if one IP address has a lot of vhosts.
---
 nmap-parse-output-xslt/http-hosts-ports.xslt | 30 ++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 nmap-parse-output-xslt/http-hosts-ports.xslt

diff --git a/nmap-parse-output-xslt/http-hosts-ports.xslt b/nmap-parse-output-xslt/http-hosts-ports.xslt
new file mode 100644
index 0000000..cad3531
--- /dev/null
+++ b/nmap-parse-output-xslt/http-hosts-ports.xslt
@@ -0,0 +1,30 @@
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:npo="http://xmlns.sven.to/npo">
+<npo:comment>
+        Generates a line separated list of HTTP(s) all ports.
+        Currently, the following services are detected as HTTP: http, https, http-alt, https-alt, http-proxy, sip, rtsp (potentially incomplete)
+</npo:comment>
+<npo:category>extract</npo:category>
+    <xsl:output method="text" />
+    <xsl:strip-space elements="*" />
+    <xsl:template match="/nmaprun/host/ports/port">
+        <xsl:if test="(service/@name='http' and not (service/@tunnel='ssl')) or service/@name='http-alt' or (service/@name='http-proxy' and not (service/@tunnel='ssl')) or (service/@name='sip' and not( script/@id='ssl-cert')) or (service/@name='rtsp' and not(script/@id='ssl-cert'))">
+            <xsl:text>http://</xsl:text>
+            <xsl:value-of select="../../hostnames/hostname/@name"/>
+            <xsl:text>:</xsl:text>
+            <xsl:value-of select="@portid"/>
+            <xsl:text>
+</xsl:text>
+        </xsl:if>
+        <xsl:if test="service/@name='https' or service/@name='https-alt' or (service/@name='sip' and script/@id='ssl-cert') or (service/@name='rtsp' and script/@id='ssl-cert') or (service/@name='http' and script/@id='ssl-cert') or (service/@name='http-alt' and script/@id='ssl-cert') or (service/@name='http-proxy' and script/@id='ssl-cert') or (service/@name='http' and (service/@tunnel='ssl')) or (service/@name='http-proxy' and (service/@tunnel='ssl')) ">
+            <xsl:text>https://</xsl:text>
+            <xsl:value-of select="../../hostnames/hostname/@name"/>
+            <xsl:text>:</xsl:text>
+            <xsl:value-of select="@portid"/>
+            <xsl:text>
+</xsl:text>
+        </xsl:if>
+        <xsl:apply-templates/>
+    </xsl:template>
+
+    <xsl:template match="text()" />
+</xsl:stylesheet>