Skip to content

Instantly share code, notes, and snippets.

Encoded Traversal Strings:
../
%2e%2e%2f
%252e%252e%252f
%uff0e%uff0e%u2215
%c0%ae%c0%ae%c0%af
..\
@gedsic
gedsic / nmap-http-url.py
Last active January 6, 2026 14:58 — forked from tothi/nmap-http-url.py
Generate HTTP URLs from Nmap XML (and optionally use VirtualHosts)
#!/usr/bin/env python3
#
# inputs: nmap.xml (nmap scan xml output), subdomains.csv (optional virtualhost info, hostname + ip address csv file)
# output: url listing (useful for tools like EyeWitness)
#
# sample usage: ./nmap-http-url.py nmap.xml subdomains.csv | sort -u | gowitness file -f -
#
description = '''
Generate HTTP URLs from Nmap XML (and optionally additional VirtualHost listing, taken from e.g. subdomain enumeration).