python信息安全工具之端口扫描器
2024-05-09 18:34:58
前言
人生苦短，我用python。有人可能会文这样的问题，既然市面上已经十分完美的同种类型的工具，为什么还需要自己写呢？我个人认为通过一定限度”造轮子”才能提高能力，通过“造轮子”才能能脱离“脚本小子”的阵营。
这个系列我将使用python写出端口扫描，端口爆破，服务识别，cms识别等工具。能力有限。
正文
端口扫描，就是对一段端口或指定的端口进行扫描。通过扫描结果可以知道一台计算机上都提供了哪些服务，然后就可以通过所提供的这些服务的己知漏洞就可进行攻击。其原理是当一个主机向远端一个服务器的某一个端口提出建立一个连接的请求，如果对方有此项服务，就会应答，如果对方未安装此项服务时，即使你向相应的端口发出请求，对方仍无应答，利用这个原理，如果对所有熟知端口或自己选定的某个范围内的熟知端口分别建立连接，并记录下远端服务器所给予的应答，便可知道哪些端口是开放的。
著名的端口扫描器有namp等等
下面将使用Python提供socket模块制造一个简易的端口扫描器，分为三个版本，分别是最基础的版本，多线程版本以及最后的交互式版本，需要学习python3的socket和threading模块的简单使用。
端口扫描的原理：
调用socket.connect_ex((ip, port))，端口开放则返回0，否则返回错误代码，实现和nmap的全连接扫描类似的功能。
单线程版本，对top50、top100、top1000以及自定义端口扫描，使用socket模块进行端口扫描。
#!/usr/bin/env python3
#-*-coding:utf-8-*-import time
import socketdef get_ip_by_name(domain):'''提供域名转ip的功能，利用socket.gethostbyname，返回str'''try:return socket.gethostbynameexcept Exception as e:print("%s:%s"%(domain, e))def __port_scan(ip, port_list, timeout):'''端口扫描核心代码'''START_MSG = ""OPEN_MSG = "% 6d [OPEN]"result_list = list()for port in port_list:try:s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)s.settimeout(timeout)result_code = s.connect_ex((ip, port)) #开放放回0if result_code == 0:print(OPEN_MSG % port)result_list.append(port)else:continueexcept Exception as e:print(e)finally:s.close()return result_listdef all_port_scan(ip, start_port = 1, end_port = 65535, timeout=3):'''扫描所有的端口(1-65535)，返回一个包含所有开放的端口list，可以通过参数start_port和参数end_port自定义开始端口和结束端口'''port_list = range(start_port,end_port+1)result_list = __port_scan(ip, port_list, timeout)return result_listdef value_port_scan(ip, top = 1000, timeout = 3):'''扫描top的端口，top的值可以选择50、100、1000(default)，返回一个包含所有开放的端口list，可以通过参数top设置top值'''top50_list = [21,22,25,53,80,110,113,135,139,143,179,199,443,445,465,514,548,554,587,646,993,995,1025,1026,1433,1720,1723,2000,3306,3389,5060,5666,5900,6001,8000,8008,8080,8443,8888,10000,32768,49152,49154]top100_list = [7,9,13,21,22,25,37,53,79,80,88,106,110,113,119,135,139,143,179,199,389,427,443,444,465,513,514,543,548,554,587,631,646,873,990,993,995,1025,1026,1027,1028,1110,1433,1720,1723,1755,1900,2000,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000,6646,7070,8000,8008,8080,8443,8888,9100,9999,32768,49152,49153,49154,49155,49156]top1000_list = [1,3,6,9,13,17,19,20,21,22,23,24,25,30,32,37,42,49,53,70,79,80,81,82,83,84,88,89,99,106,109,110,113,119,125,135,139,143,146,161,163,179,199,211,222,254,255,259,264,280,301,306,311,340,366,389,406,416,425,427,443,444,458,464,481,497,500,512,513,514,524,541,543,544,548,554,563,587,593,616,625,631,636,646,648,666,667,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800,808,843,873,880,888,898,900,901,902,911,981,987,990,992,995,999,1000,1001,1007,1009,1010,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1098,1099,1102,1104,1105,1106,1107,1110,1111,1112,1113,1117,1119,1121,1122,1123,1126,1130,1131,1137,1141,1145,1147,1148,1151,1154,1163,1164,1165,1169,1174,1183,1185,1186,1192,1198,1201,1213,1216,1217,1233,1236,1244,1247,1259,1271,1277,1287,1296,1300,1309,1310,1322,1328,1334,1352,1417,1433,1443,1455,1461,1494,1500,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687,1700,1717,1718,1719,1720,1723,1755,1761,1782,1801,1805,1812,1839,1862,1863,1875,1900,1914,1935,1947,1971,1974,1984,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2013,2020,2021,2030,2033,2034,2038,2040,2041,2042,2045,2046,2047,2048,2065,2068,2099,2103,2105,2106,2111,2119,2121,2126,2135,2144,2160,2170,2179,2190,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381,2382,2393,2399,2401,2492,2500,2522,2525,2557,2601,2604,2607,2638,2701,2710,2717,2725,2800,2809,2811,2869,2875,2909,2920,2967,2998,3000,3003,3005,3006,3011,3013,3017,3030,3052,3071,3077,3128,3168,3211,3221,3260,3268,3283,3300,3306,3322,3323,3324,3333,3351,3367,3369,3370,3371,3389,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689,3703,3737,3766,3784,3800,3809,3814,3826,3827,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000,4001,4002,4003,4004,4005,4045,4111,4125,4129,4224,4242,4279,4321,4343,4443,4444,4445,4449,4550,4567,4662,4848,4899,4998,5000,5001,5002,5003,5009,5030,5033,5050,5054,5060,5080,5087,5100,5101,5120,5190,5200,5214,5221,5225,5269,5280,5298,5357,5405,5414,5431,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678,5718,5730,5800,5801,5810,5815,5822,5825,5850,5859,5862,5877,5900,5901,5902,5903,5906,5910,5915,5922,5925,5950,5952,5959,5960,5961,5962,5987,5988,5998,5999,6000,6001,6002,6003,6004,6005,6006,6009,6025,6059,6100,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565,6566,6580,6646,6666,6667,6668,6689,6692,6699,6779,6788,6792,6839,6881,6901,6969,7000,7001,7004,7007,7019,7025,7070,7100,7103,7106,7200,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777,7800,7911,7920,7937,7999,8000,8001,8007,8008,8009,8010,8021,8031,8042,8045,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8093,8099,8180,8192,8193,8200,8222,8254,8290,8291,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651,8654,8701,8800,8873,8888,8899,8994,9000,9001,9002,9009,9010,9040,9050,9071,9080,9090,9099,9100,9101,9102,9110,9200,9207,9220,9290,9415,9418,9485,9500,9502,9535,9575,9593,9594,9618,9666,9876,9877,9898,9900,9917,9929,9943,9968,9998,9999,10000,10001,10002,10003,10009,10012,10024,10082,10180,10215,10243,10566,10616,10621,10626,10628,10778,11110,11967,12000,12174,12265,12345,13456,13722,13782,14000,14238,14441,15000,15002,15003,15660,15742,16000,16012,16016,16018,16080,16113,16992,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221,20828,21571,22939,23502,24444,24800,25734,26214,27000,27352,27355,27715,28201,30000,30718,30951,31038,31337,32768,32769,32770,32771,32772,32773,32774,32775,32776,32777,32778,32779,32780,32781,32782,32783,32784,33354,33899,34571,34572,35500,38292,40193,40911,41511,42510,44176,44442,44501,45100,48080,49152,49153,49154,49155,49156,49157,49158,49159,49160,49163,49165,49167,49175,49400,49999,50000,50001,50002,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055,55555,55600,56737,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389]if top == 50:port_list = top50_listelif top == 100:port_list = top100_listelse:port_list = top1000_listresult_list = __port_scan(ip, port_list, timeout)return result_listif __name__ == '__main__':#all_port_scan("127.0.0.1")value_port_scan("127.0.0.1")
第一个版本的扫描器扫描全部端口结果：
单线程肯定是很慢的，端口个数是65535个一共花费了307秒钟，第二个版本就是多线程版本，优化第一个版本扫描的代码，并且对代码进行了封装。
#!/usr/bin/env python3
#-*-coding:utf-8-*-import time, sys
import socket
import queue
import threadingclass PortScaner(object):'''这个版本(v2)的端口扫描器相对于上一个版本(v1)，大概变化是：使用类(class)来封装，增加多线程，细节上的变化'''class PortScan(threading.Thread):def __init__(self, port_queue, ip, timeout = 3):'''初始化参数'''threading.Thread.__init__(self)self.__port_queue = port_queueself.__ip = ipself.__timeout = timeoutdef run(self):'''多线程实际调用的方法，如果端口队列不为空，循环执行'''while True:if self.__port_queue.empty():breakOPEN_MSG = "% 6d [OPEN]\n"port = self.__port_queue.get(timeout = 0.5)ip = self.__iptimeout = self.__timeouttry:s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)s.settimeout(timeout)result_code = s.connect_ex((ip, port)) #开放放回0if result_code == 0:#print(OPEN_MSG % port) # print不适合多线程sys.stdout.write(OPEN_MSG % port)#result_list.append(port)# else:# sys.stdout.write("% 6d [CLOSED]\n" % port)except Exception as e:print(e)finally:s.close()def get_port_lists(self, top = None, start_port = 1, end_port = 65535):'''获取扫描的端口list，top == None, start_port和end_port有效，top取值为50,100，1000分为为前top端口，当top == None时，并且端口号无效返回[1-65535]'''top50_list = [21,22,25,53,80,110,113,135,139,143,179,199,443,445,465,514,548,554,587,646,993,995,1025,1026,1433,1720,1723,2000,3306,3389,5060,5666,5900,6001,8000,8008,8080,8443,8888,10000,32768,49152,49154]top100_list = [7,9,13,21,22,25,37,53,79,80,88,106,110,113,119,135,139,143,179,199,389,427,443,444,465,513,514,543,548,554,587,631,646,873,990,993,995,1025,1026,1027,1028,1110,1433,1720,1723,1755,1900,2000,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000,6646,7070,8000,8008,8080,8443,8888,9100,9999,32768,49152,49153,49154,49155,49156]top1000_list = [1,3,6,9,13,17,19,20,21,22,23,24,25,30,32,37,42,49,53,70,79,80,81,82,83,84,88,89,99,106,109,110,113,119,125,135,139,143,146,161,163,179,199,211,222,254,255,259,264,280,301,306,311,340,366,389,406,416,425,427,443,444,458,464,481,497,500,512,513,514,524,541,543,544,548,554,563,587,593,616,625,631,636,646,648,666,667,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800,808,843,873,880,888,898,900,901,902,911,981,987,990,992,995,999,1000,1001,1007,1009,1010,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1098,1099,1102,1104,1105,1106,1107,1110,1111,1112,1113,1117,1119,1121,1122,1123,1126,1130,1131,1137,1141,1145,1147,1148,1151,1154,1163,1164,1165,1169,1174,1183,1185,1186,1192,1198,1201,1213,1216,1217,1233,1236,1244,1247,1259,1271,1277,1287,1296,1300,1309,1310,1322,1328,1334,1352,1417,1433,1443,1455,1461,1494,1500,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687,1700,1717,1718,1719,1720,1723,1755,1761,1782,1801,1805,1812,1839,1862,1863,1875,1900,1914,1935,1947,1971,1974,1984,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2013,2020,2021,2030,2033,2034,2038,2040,2041,2042,2045,2046,2047,2048,2065,2068,2099,2103,2105,2106,2111,2119,2121,2126,2135,2144,2160,2170,2179,2190,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381,2382,2393,2399,2401,2492,2500,2522,2525,2557,2601,2604,2607,2638,2701,2710,2717,2725,2800,2809,2811,2869,2875,2909,2920,2967,2998,3000,3003,3005,3006,3011,3013,3017,3030,3052,3071,3077,3128,3168,3211,3221,3260,3268,3283,3300,3306,3322,3323,3324,3333,3351,3367,3369,3370,3371,3389,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689,3703,3737,3766,3784,3800,3809,3814,3826,3827,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000,4001,4002,4003,4004,4005,4045,4111,4125,4129,4224,4242,4279,4321,4343,4443,4444,4445,4449,4550,4567,4662,4848,4899,4998,5000,5001,5002,5003,5009,5030,5033,5050,5054,5060,5080,5087,5100,5101,5120,5190,5200,5214,5221,5225,5269,5280,5298,5357,5405,5414,5431,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678,5718,5730,5800,5801,5810,5815,5822,5825,5850,5859,5862,5877,5900,5901,5902,5903,5906,5910,5915,5922,5925,5950,5952,5959,5960,5961,5962,5987,5988,5998,5999,6000,6001,6002,6003,6004,6005,6006,6009,6025,6059,6100,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565,6566,6580,6646,6666,6667,6668,6689,6692,6699,6779,6788,6792,6839,6881,6901,6969,7000,7001,7004,7007,7019,7025,7070,7100,7103,7106,7200,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777,7800,7911,7920,7937,7999,8000,8001,8007,8008,8009,8010,8021,8031,8042,8045,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8093,8099,8180,8192,8193,8200,8222,8254,8290,8291,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651,8654,8701,8800,8873,8888,8899,8994,9000,9001,9002,9009,9010,9040,9050,9071,9080,9090,9099,9100,9101,9102,9110,9200,9207,9220,9290,9415,9418,9485,9500,9502,9535,9575,9593,9594,9618,9666,9876,9877,9898,9900,9917,9929,9943,9968,9998,9999,10000,10001,10002,10003,10009,10012,10024,10082,10180,10215,10243,10566,10616,10621,10626,10628,10778,11110,11967,12000,12174,12265,12345,13456,13722,13782,14000,14238,14441,15000,15002,15003,15660,15742,16000,16012,16016,16018,16080,16113,16992,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221,20828,21571,22939,23502,24444,24800,25734,26214,27000,27352,27355,27715,28201,30000,30718,30951,31038,31337,32768,32769,32770,32771,32772,32773,32774,32775,32776,32777,32778,32779,32780,32781,32782,32783,32784,33354,33899,34571,34572,35500,38292,40193,40911,41511,42510,44176,44442,44501,45100,48080,49152,49153,49154,49155,49156,49157,49158,49159,49160,49163,49165,49167,49175,49400,49999,50000,50001,50002,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055,55555,55600,56737,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389]if(top != None):if(top == 50):return top50_listelif(top == 100):return top100_listelse:return top1000_listelse:if start_port >= 1 and end_port <= 65535 and start_port <= end_port:return list(range(start_port, end_port+1))else:return list(range(1, 65535+1))def get_ip_by_name(self, domain):'''提供域名转ip的功能，利用socket.gethostbyname，返回str'''try:return socket.gethostbynameexcept Exception as e:print("%s:%s"%(domain, e))def main():start_time = time.time() # 脚本开始执行的时间port_scner = PortScaner()port_queue = queue.Queue() # py3的写法，使用queue模块, 线程专用thread_num = 100 # 线程数量threads = [] # 保存新线程top = None # 取端口top数ip = "xxx.xxx.xx.xx" # 扫描的ipport_list = port_scner.get_port_lists(top = top) # 根据参数获取总端口list#print(port_list)for port in port_list:port_queue.put(port)for t in range(thread_num):threads.append(port_scner.PortScan(port_queue, ip, timeout = 3))# 启动线程for thread in threads:thread.start()# 阻塞线程for thread in threads:thread.join()end_time = time.time() # 脚本结束执行的时间print("[end time] %3ss"%(end_time-start_time,))
if __name__ == '__main__':main()
下面是第二版扫描器的运行结果，扫描本局域网中的另一台主机全部端口，大概需要十二秒钟。
如果是扫描top1000端口，扫描时间是0.15秒钟，默认100线程，当时top1000扫描的只是top1000的端口，不常用端口不能识别。
对比单线程版本，速度简直不要太快好吗？但是这个版本有一个较大的问题是所有的配置都需要在main()函数中修改，使用起来不是特别方便。
thread_num = 100 # 线程数量threads = [] # 保存新线程top = None # 取端口top数ip = "xxx.xxx.xx.xx" # 扫描的ipport_list = port_scner.get_port_lists(top = top) # 根据参数获取总端口list
而第三个版本则主要解决了这个问题，可以通过命令行进行交互，当然代码质量因为能力有限不是很好。
#!/usr/bin/env python3
#-*-coding:utf-8-*-import time, sys
import socket
import queue
import threading
import base64class PortScaner(object):'''这个版本(v3)的端口扫描器相对于上一个版本(v2)，大概变化是：增加交互功能和LOGO'''class PortScan(threading.Thread):def __init__(self, port_queue, ip, timeout = 3):'''初始化参数'''threading.Thread.__init__(self)self.__port_queue = port_queueself.__ip = ipself.__timeout = timeoutdef run(self):'''多线程实际调用的方法，如果端口队列不为空，循环执行'''while True:if self.__port_queue.empty():breakOPEN_MSG = "% 6d [OPEN]\n"port = self.__port_queue.get(timeout = 0.5)ip = self.__iptimeout = self.__timeouttry:s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)s.settimeout(timeout)result_code = s.connect_ex((ip, port)) #开放放回0if result_code == 0:#print(OPEN_MSG % port) # print不适合多线程sys.stdout.write(OPEN_MSG % port)#result_list.append(port)# else:# sys.stdout.write("% 6d [CLOSED]\n" % port)except Exception as e:print(e)finally:s.close()def get_port_lists(self, top = None, start_port = 1, end_port = 65535):'''获取扫描的端口list，top == None, start_port和end_port有效，top取值为50,100，1000分为为前top端口，当top == None时，并且端口号无效返回[1-65535]'''top50_list = [21,22,25,53,80,110,113,135,139,143,179,199,443,445,465,514,548,554,587,646,993,995,1025,1026,1433,1720,1723,2000,3306,3389,5060,5666,5900,6001,8000,8008,8080,8443,8888,10000,32768,49152,49154]top100_list = [7,9,13,21,22,25,37,53,79,80,88,106,110,113,119,135,139,143,179,199,389,427,443,444,465,513,514,543,548,554,587,631,646,873,990,993,995,1025,1026,1027,1028,1110,1433,1720,1723,1755,1900,2000,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000,6646,7070,8000,8008,8080,8443,8888,9100,9999,32768,49152,49153,49154,49155,49156]top1000_list = [1,3,6,9,13,17,19,20,21,22,23,24,25,30,32,37,42,49,53,70,79,80,81,82,83,84,88,89,99,106,109,110,113,119,125,135,139,143,146,161,163,179,199,211,222,254,255,259,264,280,301,306,311,340,366,389,406,416,425,427,443,444,458,464,481,497,500,512,513,514,524,541,543,544,548,554,563,587,593,616,625,631,636,646,648,666,667,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800,808,843,873,880,888,898,900,901,902,911,981,987,990,992,995,999,1000,1001,1007,1009,1010,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1098,1099,1102,1104,1105,1106,1107,1110,1111,1112,1113,1117,1119,1121,1122,1123,1126,1130,1131,1137,1141,1145,1147,1148,1151,1154,1163,1164,1165,1169,1174,1183,1185,1186,1192,1198,1201,1213,1216,1217,1233,1236,1244,1247,1259,1271,1277,1287,1296,1300,1309,1310,1322,1328,1334,1352,1417,1433,1443,1455,1461,1494,1500,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687,1700,1717,1718,1719,1720,1723,1755,1761,1782,1801,1805,1812,1839,1862,1863,1875,1900,1914,1935,1947,1971,1974,1984,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2013,2020,2021,2030,2033,2034,2038,2040,2041,2042,2045,2046,2047,2048,2065,2068,2099,2103,2105,2106,2111,2119,2121,2126,2135,2144,2160,2170,2179,2190,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381,2382,2393,2399,2401,2492,2500,2522,2525,2557,2601,2604,2607,2638,2701,2710,2717,2725,2800,2809,2811,2869,2875,2909,2920,2967,2998,3000,3003,3005,3006,3011,3013,3017,3030,3052,3071,3077,3128,3168,3211,3221,3260,3268,3283,3300,3306,3322,3323,3324,3333,3351,3367,3369,3370,3371,3389,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689,3703,3737,3766,3784,3800,3809,3814,3826,3827,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000,4001,4002,4003,4004,4005,4045,4111,4125,4129,4224,4242,4279,4321,4343,4443,4444,4445,4449,4550,4567,4662,4848,4899,4998,5000,5001,5002,5003,5009,5030,5033,5050,5054,5060,5080,5087,5100,5101,5120,5190,5200,5214,5221,5225,5269,5280,5298,5357,5405,5414,5431,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678,5718,5730,5800,5801,5810,5815,5822,5825,5850,5859,5862,5877,5900,5901,5902,5903,5906,5910,5915,5922,5925,5950,5952,5959,5960,5961,5962,5987,5988,5998,5999,6000,6001,6002,6003,6004,6005,6006,6009,6025,6059,6100,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565,6566,6580,6646,6666,6667,6668,6689,6692,6699,6779,6788,6792,6839,6881,6901,6969,7000,7001,7004,7007,7019,7025,7070,7100,7103,7106,7200,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777,7800,7911,7920,7937,7999,8000,8001,8007,8008,8009,8010,8021,8031,8042,8045,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8093,8099,8180,8192,8193,8200,8222,8254,8290,8291,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651,8654,8701,8800,8873,8888,8899,8994,9000,9001,9002,9009,9010,9040,9050,9071,9080,9090,9099,9100,9101,9102,9110,9200,9207,9220,9290,9415,9418,9485,9500,9502,9535,9575,9593,9594,9618,9666,9876,9877,9898,9900,9917,9929,9943,9968,9998,9999,10000,10001,10002,10003,10009,10012,10024,10082,10180,10215,10243,10566,10616,10621,10626,10628,10778,11110,11967,12000,12174,12265,12345,13456,13722,13782,14000,14238,14441,15000,15002,15003,15660,15742,16000,16012,16016,16018,16080,16113,16992,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221,20828,21571,22939,23502,24444,24800,25734,26214,27000,27352,27355,27715,28201,30000,30718,30951,31038,31337,32768,32769,32770,32771,32772,32773,32774,32775,32776,32777,32778,32779,32780,32781,32782,32783,32784,33354,33899,34571,34572,35500,38292,40193,40911,41511,42510,44176,44442,44501,45100,48080,49152,49153,49154,49155,49156,49157,49158,49159,49160,49163,49165,49167,49175,49400,49999,50000,50001,50002,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055,55555,55600,56737,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389]if(top != None):if(top == 50):return top50_listelif(top == 100):return top100_listelse:return top1000_listelse:if start_port >= 1 and end_port <= 65535 and start_port <= end_port:return list(range(start_port, end_port+1))else:return list(range(1, 65535+1))def get_ip_by_name(self, domain):'''提供域名转ip的功能，利用socket.gethostbyname，返回str'''domain = (domain.replace("http://","")).replace("https://","") # py3print(domain)try:return socket.gethostbyname(domain)except Exception as e:print("%s:%s"%(domain, e))def split(self, args):port_temp = args[4].split("-")start_port = int(port_temp[0])end_port = int(port_temp[1])return int(start_port), int(end_port)def banber(self):logo = '''____ _ ____
| _ \ ___ _ __| |_/ ___| ___ __ _ _ __ ___ _ __
| |_) / _ \| '__| __\___ \ / __/ _` | '_ \ / _ \ '__|
| __/ (_) | | | |_ ___) | (_| (_| | | | | __/ |
|_| \___/|_| \__|____/ \___\__,_|_| |_|\___|_| v3.0'''return logodef help(self):help = """
[Usage]python portscaner_v3.py -i ip -p [port_scope|top_num] [-t thread_num]python portscaner_v3.py -u url -p [port_scope|top_num] [-t thread_num]\n\n[Example]python3 portscaner_v3.py -i 127.0.0.1 -p 1000 -t 100python3 portscaner_v3.py -u https://www.baidu.com -p 1-65535[Value]ip 0.0.0.0-255.255.255.255top_num [50|100|1000(default)]port_scope 1-65535thread_num [int|10(default)]"""return helpdef main():start_time = time.time() # 脚本开始执行的时间port_scner = PortScaner()logo = port_scner.banber()#usage = port_scner.usage()port_queue = queue.Queue() # py3的写法，使用queue模块, 线程专用thread_num = 10 # 线程数量,default=10threads = [] # 保存新线程top = None # 取端口top数start_port = 0end_port = 0ip = "127.0.0.1" # 扫描的ip# 命令行交互print(logo)args = sys.argvif "-h" in args or "--help" in args:help = port_scner.help()print(help)sys.exit(1)if len(args) == 7:#['portscaner_v3.py', '-i', 'ip', '-p', '10-100', '-t', 'thread_num']if args[1] == "-i" and args[3] == "-p" and args[5] == "-t":ip = args[2]thread_num = args[6]if args[4].find("-")!=-1:split = port_scner.split()start_port = split[0]end_port = split[1]else:top = args[4]elif args[1] == "-u" and args[3] == "-p" and args[5] == "-t":ip = port_scner.get_ip_by_name(args[2])thread_num = args[6]if args[4].find("-")!=-1:split = port_scner.split()start_port = split[0]end_port = split[1]else:top = args[4]else:sys.exit(1)elif len(args) == 5: # thread_num default 10if args[1] == "-i" and args[3] == "-p":ip = args[2]if args[4].find("-")!=-1:split = port_scner.split()start_port = split[0]end_port = split[1]else:top = args[4]elif args[1] == "-u" and args[3] == "-p":ip = port_scner.get_ip_by_name(args[2])if args[4].find("-")!=-1:split = port_scner.split()start_port = split[0]end_port = split[1]else:top = args[4]else:sys.exit(1)else:help = port_scner.help()print(help)sys.exit(1)#print("ip:%s,top:%s,start_port:%s,end_port:%s,thread_num:%s"%(ip,type(top),type(start_port),type(end_port),type(thread_num)))if top != None:port_list = port_scner.get_port_lists(top = top) # 根据参数获取总端口listelse:port_list = port_scner.get_port_lists(start_port = start_port, end_port = end_port)for port in port_list:port_queue.put(port)for t in range(int(thread_num)):threads.append(port_scner.PortScan(port_queue, ip, timeout = 3))print("[RESULT]\n")# 启动线程for thread in threads:thread.start()# 阻塞线程for thread in threads:thread.join()end_time = time.time() # 脚本结束执行的时间print("[end time] %3ss"%(end_time-start_time,))
if __name__ == '__main__':main()
下面是运行第三个版本扫描器的截图，帮助说明
扫描结果
后言
共勉
python信息安全工具之端口扫描器相关推荐
- python调用扫描仪_使用Python编写简单的端口扫描器的实例分享
单线程实现单线程实现道理比较简单,这里尝试Soket连接3389,连接成功说明端口开放,否则说明没有开远程服务.随便修改了一下就ok了,代码如下,最终得到自己的IP地址. #!/usr/bin/env ...
- zenmap扫描ip段_zenmap端口扫描工具(ip端口扫描器)V7.71 最新版
zenmap端口扫描工具(ip端口扫描器)是一款功能强大的端口漏洞扫描工具.害怕出现端口漏洞?zenmap端口扫描工具(ip端口扫描器)轻松帮助用户.功能与NMap一致,交互性好,界面输出更为直观,可 ...
- python写端口扫描器_使用Python编写简单的端口扫描器的实例分享
#!/usr/bin/env python import socket if __name__=='__main__': port=3389 s=socket.socket() for cnt in ...
- python 实现简单的端口扫描器
1 #coding=utf-8 2 import socket 3 import time 4 import sys 5 6 def portScanner(ip,port): 7 server = ...
- python编写一个端口扫描器
可以使用 Python 来编写一个端口扫描器.下面是一个简单的端口扫描器的代码示例: import socketdef port_scanner(host, port):try:sock = sock ...
- 小小黑客之路（一）——端口扫描器
在之前了解过黑客,曾经在网易上写过一篇关于黑客的文章--<黑客初识>,由于各种原因没有继续学习去,由于前几天的机房讲课,又激起我那不安的心,故找到一本<小小黑客之路>进行学习. ...
- 基于Python Tkinter的多线程局域网扫描器
#本文仅供参考有不足之处请指出 一.设计环境 系统:Windows 11 语言:python3.8 编译器:PyCharm 二.设计要求 1.局域网内的存活主机发现 2.扫描指定主机开放的端口 3.图 ...
- python代码扫描工具_用Python编写一个高效的端口扫描器的方法
PyPortScanner python多线程端口扫描器. 输出示例: Github 背景 有时候,在进行网络相关的研究的时候,我们需要执行一些有目的的参数测量.而端口扫描就是其中比较普遍也比较重要的 ...
- 实例探究Python以并发方式编写高性能端口扫描器的方法
来源:http://www.jb51.net/article/86615.htm 关于端口扫描器 端口扫描工具(Port Scanner)指用于探测服务器或主机开放端口情况的工具.常被计算机管理员用于 ...
- 【Python黑帽子】——搭建TCP端口扫描器
作者名:Demo不是emo 主页面链接:主页传送门 创作初心:一切为了她 座右铭:不要让时代的悲哀成为你的悲哀 专研方向:网络安全,数据结构 每日emo:唯有信仰与日月亘古不变 经过一段时间pyth ...
最新文章
- Android自定义控件NumberCircleProgressBar(圆形进度条)的实现
- CocosCreator上的游戏（调试）发布到微信小程序
- 数据库ORA-03113排查
- WeChall_PHP-Local File Inclusion（LFI）
- 如何设置search parameter的默认operator
- 作者：赵妍妍（1983-），女，哈尔滨工业大学机电学院媒体技术与艺术系副教授、硕士生导师。...
- 程序员更像艺术家 哪种状态更具创造性？
- java grpc简单例子
- 天天生鲜项目实战-思路 数据库设计
- ubuntu内核和主线内核_如何在没有任何Distro-upgrade的情况下将内核更新到最新的主线版本？...
- ssh 切换用户_从零开始学习华为路由交换 | 配置ssh远程管理
- 一款好用的取色工具TakeColor.exe
- 中美线径对照表_导线截面与线径对照表
- 重置Studio 3T的试用时间
- TiDB 故障诊断与性能排查：发生即看见，一切可回溯，Continuous Profiling 应用实践
- [运维|系统] 在飞腾FT2000上安装CentOS7
- 娶老婆的15条金科玉律
- 用python实现时间序列白噪声检验
- 【Arduino+ESP32专题】PlatformIO串口监视器的默认波特率修改
- js的event loop/js内存泄漏