From 8298b27c9cf841ea9b682fe4b020ea91ce5eccf0 Mon Sep 17 00:00:00 2001 From: Michael Monsivais Date: Fri, 15 Sep 2023 20:05:37 -0400 Subject: [PATCH] Fix: searchsploit Nmap parsing loses version data. Modified searchsploit's Nmap XML parsing to correctly extract software versions. Also, these versions are no longer split on '.'. --- searchsploit | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/searchsploit b/searchsploit index 73d6fd1c9..d67cd8b44 100755 --- a/searchsploit +++ b/searchsploit @@ -315,7 +315,7 @@ function searchsploitout() { ## Try and remove terms that could confuse searches #software=$( echo "${software}" | sed 's_/_ _g' ) - software=$( echo "${software}" | sed -e 's/[^a-zA-Z0-9]/ /g' ) + software=$( echo "${software}" | sed -e 's/[^a-zA-Z0-9.]/ /g' ) if [[ "${VERBOSE}" -eq 1 ]]; then ## Loop each word? @@ -378,7 +378,7 @@ function nmapxml() { ## Read in XMP (IP, name, service and version) xmllint --xpath '//address/@addr|//service/@name|//service/@product|//service/@version' "${FILE}" \ - | sed -e $'s/addr=/\\\n[IP] /g; s/name=/\\\n[NAME] /g; s/product=/\\\n[PRODUCT] /g;s/" version="/\\\n[VERSION] /g; s/"//g' \ + | sed -e $'s/addr=/\\\n[IP] /g; s/name=/\\\n[NAME] /g; s/product=/\\\n[PRODUCT] /g; s/version=/\\\n[VERSION] /g; s/"//g' \ | grep -v '\[IP\].*\:' \ | while read line; do type=$( echo "${line}" | cut -d" " -f 1 )