Python小练习-实现简单端口扫描~

╰半夏微凉° 2022-07-14 03:47 215阅读 0赞

我就看了几天的python。这个作为练习，若有错误，望指出。

就是基于socket，每个端口去连一下能返回信息就是开启的。一想这么的没必要。  
可以去连接，异常出错就是没有开启。

s=socket.socket() 
                s.connect((ip,port))

但是有的连接要很长时间，那么设置时间：

s.settimeout(0.1)

只是ip，没有域名很没意思那么来个域名解析成ip：

socket.gethostbyname(Domain)

先不考虑多线程：

import socket
    def getip(Domain):  
        try:  
            return socket.gethostbyname(Domain)  
        except socket.error,e:  
            print '%s: %s'%(Domain,e)  
            return 0  
    
    def scan(ip):
        list1=list()
        list2=range(1,65535)
        for port in list2:
            try:
                s=socket.socket() 
                s.settimeout(0.1)
                s.connect((ip,port))
                str1= "[+] Port:"+str(port) +" open "
                print str1
                list1.append(port)
                s.close()
            except:pass
        print list1
    def main():
        print '.........'
        print 'please input Domain/ip'
        Domain = raw_input("input:")
        ip = getip(Domain)
        print 'ip:'+ip
        scan(ip)
    if __name__=='__main__':  
        main()

![这里写图片描述][20161125222102294]

不用线程，一个一个去连接，因为是阻塞的，真的真的是异常的慢。。。  
上网查了下别人是怎么写的：

import socket 
    import threading 
    from Queue import Queue 
    def scan(port): 
      s = socket.socket() 
      s.settimeout(0.1) 
      if s.connect_ex(('localhost', port)) == 0: 
        print port, 'open'
      s.close() 
    
    def worker(): 
      while not q.empty(): 
        port = q.get() 
        try: 
          scan(port) 
        finally: 
          q.task_done() 
    
    if __name__ == '__main__': 
      q = Queue() 
      map(q.put,xrange(1,65535)) 
      threads = [threading.Thread(target=worker) for i in xrange(100)] 
      map(lambda x:x.start(),threads) 
      q.join()

**代码转自：**  
[http://www.jb51.net/article/86615.htm][http_www.jb51.net_article_86615.htm]

还有个很好的：

# -*- coding: utf-8 -*-
    __author__ = 'Phtih0n'
    import threading, socket, sys, cmd, os, Queue
    #扫描常用端口
    PortList = [21, 22, 23, 25, 80, 135, 137, 139, 445, 1433, 1502, 3306, 3389, 8080, 9015]
    #得到一个队列
    def GetQueue(list):
        PortQueue = Queue.Queue(65535)
        for p in list:
            PortQueue.put(p)
        return PortQueue
    #单IP扫描线程个数
    nThread = 20
    #线程锁
    lock = threading.Lock()
    #超时时间
    Timeout = 3.0
    #打开的端口列表
    OpenPort = []
    class ScanThread(threading.Thread):
        def __init__(self, scanIP):
            threading.Thread.__init__(self)
            self.IP = scanIP
        def Ping(self, Port):
            global OpenPort, lock, Timeout
            sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
            sock.settimeout(Timeout)
            address = (self.IP, Port)
            try:
                sock.connect(address)
            except:
                sock.close()
                return False
            sock.close()
            OpenPort.append(Port)
            if lock.acquire():
                print "IP:%s Port:%d" % (self.IP, Port)
                lock.release()
            return True
    
    class ScanThreadSingle(ScanThread):
        def __init__(self, scanIP, SingleQueue):
            ScanThread.__init__(self, scanIP)
            self.SingleQueue = SingleQueue
        def run(self):
            while not self.SingleQueue.empty():
                p = self.SingleQueue.get()
                self.Ping(p)
    
    class ScanThreadMulti(ScanThread):
        def __init__(self, scanIP, PortList):
            ScanThread.__init__(self, scanIP)
            self.List = PortList[:]
        def run(self):
            for p in self.List:
                self.Ping(p)
    class Shell(cmd.Cmd):
        u'''Py Port Scanner 0.1 使用说明： port [port..] 设置扫描的端口，用逗号分隔。 默认：21, 22, 23, 25, 80, 135, 137, 139, 445, 1433, 1502, 3306, 3389, 8080, 9015 example：port 21,23,25 example: port 1000..2000 example: port 80,443,1000..1500 scan [IP] 扫描某一IP地址 example: scan 192.168.1.5 search [IP begin]-[IP end] 扫描某一IP段 example: search 192.168.1.1-192.168.1.100 time [timeout] 设置超时时间，默认为3秒 example: time 5 cls 清楚屏幕内容 listport 打印端口列表 help 打开本帮助 '''
        def __init__(self):
            cmd.Cmd.__init__(self)
            reload(sys)
            sys.setdefaultencoding('utf-8')
            self.prompt = "Port Scan >>"
            self.intro = "Py Port Scanner 0.1"
        def do_EOF(self, line):
            return True
        def do_help(self, line):
            print self.__doc__
        #设置端口
        def do_port(self, line):
            global PortList
            PortList = []
            ListTmp = line.split(',')
            for port in ListTmp:
                if port.find("..") < 0:
                    if not port.isdigit():
                        print "输入错误"
                        return False
                    PortList.append(int(port))
                else:
                    RangeLst = port.split("..")
                    if not (RangeLst[0].isdigit() and RangeLst[1].isdigit()):
                        raise ValueError
                        exit()
                    for i in range(int(RangeLst[0]), int(RangeLst[1])):
                        PortList.append(i)
        def do_scan(self, line):
            global nThread, PortList
            ThreadList = []
            strIP = line
            SingleQueue = GetQueue(PortList)
            for i in range(0, nThread):
                t = ScanThreadSingle(strIP, SingleQueue)
                ThreadList.append(t)
            for t in ThreadList:
                t.start()
            for t in ThreadList:
                t.join()
        def do_search(self, line):
            global nThread, PortList
            ThreadList = []
            (BeginIP, EndIP) = line.split("-")
            try:
                socket.inet_aton(BeginIP)
                socket.inet_aton(EndIP)
            except:
                print "输入错误"
                return
            IPRange = BeginIP[0:BeginIP.rfind('.')]
            begin = BeginIP[BeginIP.rfind('.') + 1:]
            end = EndIP[EndIP.rfind('.') + 1:]
            for i in range(int(begin), int(end)):
                strIP = "%s.%s" % (IPRange, i)
                t = ScanThreadMulti(strIP, PortList)
                ThreadList.append(t)
            for t in ThreadList:
                t.start()
            for t in ThreadList:
                t.join()
        def do_listport(self, line):
            global PortList
            for p in PortList:
                print p,
            print '\n'
        def do_time(self, line):
            global Timeout
            try:
                Timeout = float(line)
            except:
                print u"参数错误"
        def do_cls(self, line):
            os.system("cls")
    
    if '__main__' == __name__:
        try:
            os.system("cls")
            shell = Shell()
            shell.cmdloop()
        except:
            exit()

转自：  
[http://www.jb51.net/article/60165.htm][http_www.jb51.net_article_60165.htm]

要学的还有很多。先练习下。先从模仿别人学起。  
快一些的话可以只设置扫描几个固定的端口就快了啊~

[20161125222102294]: /images/20220714/98767126c37645b1a2de6c77eac81785.png
[http_www.jb51.net_article_86615.htm]: http://www.jb51.net/article/86615.htm
[http_www.jb51.net_article_60165.htm]: http://www.jb51.net/article/60165.htm