init

bin/nmap

@@ -0,0 +1,77 @@
+#!/bin/bash
+# (c) CompuMatter, LLC, ServerMatter
+# no warranty expressed or implied - use as is.
+# purpose of this script:
+# Can't use angryipscanner from a command line and haven't been able to find anything else that gives you what you're looking for?   
+# This nmap based bash script might just be what you're looking for. 
+
+if ! which nmap >/dev/null; then
+    echo "nmap is not installed - this script requires it"
+    echo "It can be installed with - apt install nmap"
+    return;
+fi
+# Check if the script is being run as root (EUID = 0)
+if [ "$EUID" -ne 0 ]; then
+    echo "This script must be run as root user or with sudo"
+    return;
+fi
+lease_file_location="/var/lib/dhcp/dhcpd.leases"
+
+# will return br0, eth0, eno1 or whatever the default Interface is
+default_interface=$(ip route | awk '/default/ {print $5}')
+ip_and_cidr=$(ip -o -f inet addr show $default_interface | awk '{print $4}')
+ip_range=$(echo $ip_and_cidr | sed 's/\.[0-9]*\//.0\//')
+
+echo -e "\nRunning nmap -sn $ip_range to get a list of all IP addresses\n"
+readarray -t ips < <(nmap -sn $ip_range | awk '/Nmap scan report/{gsub(/[()]/,""); print $NF}' | sort -t . -n -k 1,1 -k 2,2 -k 3,3 -k 4,4)
+
+# Set column widths
+col1=14
+col2=17
+col3=17
+col4=15
+col5=30
+
+echo -e "Checking each IP address for Hostname, MAC, Workgroup or Domain, Manufacturer info\n"
+
+# Format the output
+printf "%-${col1}s | %-${col2}s | %-${col3}s | %-${col4}s | %-${col5}s \n" "IP" "MAC" "HOSTNAME" "WG-DOMAIN" "MANUFACTURER"
+printf "%-${col1}s | %-${col2}s | %-${col3}s | %-${col4}s | %-${col5}s \n" "$(printf '%.s-' {1..13})" "$(printf '%.s-' {1..17})" "$(printf '%.s-' {1..17})" "$(printf '%.s-' {1..15})" "$(printf '%.s-' {1..30})"
+
+for IP in "${ips[@]}"
+do
+  # Run the nmap command for the current IP
+  OUTPUT="$(nmap --script nbstat.nse -p 137,139 $IP)"
+  # Extract the necessary information
+  MAC=$(echo "$OUTPUT" | grep 'MAC Address' | awk '{print $3}')
+  HOSTNAME=$(echo "$OUTPUT" | grep '<20>.*<unique>.*<active>' | awk -F'[|<]' '{print $2}' | tr -d '_' | xargs)
+  WG_DOMAIN=$(echo "$OUTPUT" | grep -v '<permanent>' | grep '<00>.*<group>.*<active>' | awk -F'[|<]' '{print $2}' | tr -d '_' | xargs)
+  MANUFACTURER=$(echo "$OUTPUT" | grep 'MAC Address' | awk -F'(' '{print $2}' | cut -d ')' -f1)
+
+  # if a dhcp server leases file exists on this machine, we will query it for a hostname if not already returned by nmap
+  if [ -f "$lease_file_location" ]; then
+    # If HOSTNAME is empty, fetch from dhcpd.leases
+    if [ -z "$HOSTNAME" ]; then
+      HOSTNAME=$(awk -v ip="$IP" '$1 == "lease" && $2 == ip {f=1} f && /client-hostname/ {print substr($2, 2, length($2) - 3); exit}' "$lease_file_location" | cut -c 1-15)
+
+      # Append an asterisk (*) if HOSTNAME has a value
+      if [ -n "$HOSTNAME" ]; then
+        HOSTNAME="$HOSTNAME *"
+      fi
+    fi
+  fi
+
+  # Print a row of data for the current IP
+  printf "%-${col1}s | %-${col2}s | %-${col3}s | %-${col4}s | %-${col5}s \n" "$IP" "$MAC" "$HOSTNAME" "$WG_DOMAIN" "$MANUFACTURER"
+done
+
+if [ -f "$lease_file_location" ]; then
+  echo -e "\n* to the right of hostname indicates the hostname could not be acquired from nmap so was pulled from $lease_file_location\n"
+fi
+
+# we are grateful if you would leave our short tagline attached
+echo -e "This network scanner script is provided free of charge by ServerMatter\n"
+# Disclaimer: This script is provided as-is with no warranty and no responsibility.
+# The author and contributors shall not be liable for any direct, indirect, incidental,
+# special, exemplary, or consequential damages arising from the use of this script.
+