Welcome to the video and map output formats in this video we will learn how to output our and map scan
data into a simple text file either silently or with live output in the terminal window.
And we'll also look at some other popular formats such as credible output SML and HMO and even unmap
shortcut that lets you export a scan to several popular formats all at the same time.
In a few of our past videos I showed you how to make a quick and dirty report of your and map scan data.
One way is by simply typing your full and mapped command then at a greater than sign followed by the
name of an output file.
And when you do that you get a plain text dump of your scan.
However there are a few disadvantages to this method.
First of all you may have noticed that we didn't see any output from our scan till it was complete.
That's not a big deal for a single host.
But if we were scanning a whole subnet for example it's difficult to know how long the scan will take
it could be minutes.
It could be years.
So to get the best of both worlds let's run the map scan with the TAC.
O capital N command followed by the name of the output file followed by our targets.
You'll notice that this time around we'll see the scan results as they come pouring in.
Another disadvantage to text file reports is they don't let us easily search for information.
We might want to see from a large output for example grep is a popular command to search files for patterns.
For example if I wanted to quickly see anything that came up in my end map scan for my printer which
is 1 9 2 1 6 8 3 100 I could do a search like this.
Unfortunately nothing turned up because the text file I searched is not in a grep will format.
However I can create a group of all output by using the unmap space.
Tak o capital G.
Then a file name followed by my target's and if I run my grep command again.
Now I can see everything and map found on this host
grep can do some extremely powerful searches but here are a few quick helpful ones.
First if you just want to know what Live hosts turned up in your scan you can do that with grep quote
status colon space up quote and then the name of your output file.
Or maybe we want to know if any of our scanned hosts have a web service running on them.
We can do that with the grep command plus the name of the port 80 in this case.
Plus slash open and that will work for any port we want to do a search match on.
So if we wanted to find where all my sequel servers are in the scan we could use 3 3 06 slash open and
it looks like this host has my sequel plus a whole host of other interesting ports open that we'd want
to investigate further.
Grep has a ton of great use cases so I encourage you to check out its man page by typing man space grep
on other popular output format is SML which can be read by web browsers and other software packages
like text editors and Microsoft Excel.
If later in your studies you start getting into penetration testing.
You will find that an end map scan in SML format can easily be pulled into the Metis Boit framework
which is also built right into Kalli First let's look at how you actually get a scan into SML format
similar to past commands we've run we use and map plus Ptak lowercase O.
And this time followed by capital x then we specify a file name and our targets.
Personally I use and map data in SML format for two simple reasons.
First I often find myself taking a scan from Kally and opening it in Zenn map on my Mac at a later time
here and then map the ex-MIL data is really easy to click through to find exactly what I'm looking for.
Another reason I like SML is it's a stepping stone towards creating a report in H.T. MLA format unfortunately
unmap doesn't have a direct way to create an h tim old report.
So what we do is use a command called X s l t P R O C followed by the SML file name followed by.
Followed by the name of the T.M. file we want to create once we have created it we can pop it open with
our favorite web browser and we've got a nice report broken down by IPS MAC addresses and open ports.
Now all this monkeying around might leave you thinking well why don't I just create all the popular
scanned formats when I do my scan so I can just decide later exactly what I want to do with the data.
That's a great question and it makes perfect sense.
So it's to do a big bad scan that will cover all your bases.
We can use the TAC o capital a flag followed by the name of the scan report.
Note that this time we don't add an extension and our list of targets Once the scan is done we'll do
an ls in this directory.
And you should now have a report in unmap format graspable format and SML format
while we're here let's sneak in one extra little tip just for fun.
Linux enthusiasts often love to do as much as possible with a single command either by stringing multiple
commands together or sending the output of one command to another program for further processing.
And these are just some simple examples Well you remember how we said and map had no built in way to
create an HMO report.
Since that's the case let's run our big bad output scan one more time and this time will add in to ampersands
which basically is saying OK terminal run this and map command and then also run whatever I type next
and let's have that second command B S S L T.
Proc command to convert our SML file to an HVM Alpha.
When the scan finishes we can do our ls command again and boom.
This time we've got four output files and we're ready to use our map data in a web browser.
A text editor or any other number of software tools in our next video we will look at a few other tools
built in McCawley besides and map that help us accomplish some basic network scans.