Here's an example of a fast scan like this: nmap -p 445 -script smb-os-detection -oA smb-scan-%y%m%d 192.0.2. Python, Perl, and Ruby all have good parsers specifically designed for Nmap's XML output.ĮDIT: Since you only want the OS as detected by smb-os-detection, you could save time scanning by only running this script and skipping the OS fingerprinting step. If you used the Nmap installer and left the Zenmap field checked, there should be a new Zenmap entry on your desktop and Start Menu. You can do similar things with the many XML parsing libraries in every language. Windows running Nmap on Nmap releases now include the Zenmap graphical user interface for Nmap. Here's how to do that with xmlstarlet: xmlstarlet sel -t -m and 'OS: Windows XP')' -v -n scan-output.xml Knowing this, we can use an XML parser to look for each element whose output attribute contains the string 'OS: Windows XP'.

Specifically, that is the output of the smb-os-discovery script. You've already filtered the output down a lot, but I can tell from the '|' at the beginning of the lines that the output you want comes from a NSE script instead of the OS detection engine. zyou can get Nmap to emit XML with the -oX or -oA options. When the problem is searching Nmap output, the answer is always, 'Use the XML output format.' This is because Nmap's regular output can change between versions and is not structured for machine input. Network Security Tools/Software (Free Download) including Nmap Open Source Network Security Scanner Redhat Linux,Microsoft Windows,FreeBSD,UNIX Hacking. Looking for the lines beginning with Nmap, and after the newline copy the next lines that are not beginning with Nmap, such as 'OS: Windows XP'.

My idea was to use awk,grep, sed, or perl: m/^Nmap. Looking for a report that only shows: Nmap scan report for 13.93.27.138 OS details: Microsoft Windows 2000 SP2 - SP4, Windows XP SP2 - SP3, or Windows Server 2003 SP0 - SP2 OS: Windows XP (Windows 2000 LAN Manager) | OS: Windows XP (Windows 2000 LAN Manager)Īggressive OS guesses: Microsoft Windows 2003 Small Business Server SP1 (91%), Microsoft Windows Server 2003 SP2 (91%), Microsoft Windows Server 2003 SP1 or SP2 (86%), Microsoft Windows XP Professional SP2 (French) (85%)Īggressive OS guesses: Microsoft Windows 2003 Small Business Server SP1 (91%), Microsoft Windows Server 2003 SP2 (90%), Microsoft Windows XP Professional SP2 (French) (85%), Microsoft Windows Server 2003 SP1 or SP2 (85%)

Nmap scan report for 13.93.27.138Ĥ45/tcp open microsoft-ds Microsoft Windows XP microsoft-ds Using Linux, I'm looking for filter out the data for Machines that are only XP matches and delete consecutive, 'nmap scan report for ' lines.

Zenmap windows