# -*- coding: utf-8 -*-
import optparse
from socket import *
import threading
threadLock=threading.Lock() #實例化threadLock對象
def connScan(Host,Port):
try:
conn=socket(AF_INET,SOCK_STREAM)
conn.connect((Host,Port))
conn.send('test message'.encode("utf-8")) #發(fā)送測試信息給端口
results=conn.recv(100) #接收主機返回的信息
threadLock.acquire() #加鎖
print('[+]%d/tcp open'% Port)
print('[+] '+results.decode("utf-8"))
conn.close()
except Exception as e:
threadLock.acquire()
print(e)
print('[-]%d/tcp closed'% Port)
finally:
threadLock.release() #釋放鎖
conn.close()
def portScan(Host,Ports):
try:
IP=gethostbyname(Host) ##獲得對應(yīng)主機的ip地址
except:
print("[-] Cannot resolve '%s':Unknown host" %Host)
return
try:
Name=gethostbyaddr(Host) ##獲得ip對應(yīng)主機的信息
print ("\n[+] Scan Results for:"+Name[0])
except:
print ("\n[+] Scan Results for:"+IP)
setdefaulttimeout(1)
for Port in Ports:
print ("Scanning port "+Port)
connScan(Host,int(Port))
def main():
usage="usage %prog -H <target host> -p/-P <target ports>"
parser=optparse.OptionParser(usage) #創(chuàng)建對象實例
parser.add_option('-H',dest='Host',type='string',help='target host') ##需要的命令行參數(shù)
parser.add_option('-P','-p',dest='Ports',type='string',help='target ports')
(options,args)=parser.parse_args()
Host=options.Host
Ports=str(options.Ports).split(',')
if (Host==None)|(Ports==None): ##如果主機和端口都是空的話
print(parser.usage)
exit(0)
portScan(Host,Ports)
if __name__=='__main__':
main()

python-nmap模塊編寫

我們還可以通過調(diào)用nmap進行端口掃描。

掃描給定ip或給定網(wǎng)段內(nèi)指定端口是否開放

-H 參數(shù)可以掃描一個ip地址也可以掃描一個網(wǎng)段，-p 只能指定一個端口

# -*- coding: utf-8 -*-
import nmap
import optparse

def Test(Hosts,port):
nm=nmap.PortScanner()
nm.scan(Hosts,port)
port_int=int(port) #將端口從字符串轉(zhuǎn)化為int類型的
for t in nm.all_hosts():
if nm[t].has_tcp(port_int): #如果445端口提供了TCP協(xié)議
state=nm[t]['tcp'][port_int]['state'] #判斷該TCP 445 端口的狀態(tài)
if state=='open':
print ('[+]Found Target Host:'+t)
return
def main():
usage="usage %prog -H <target host> -p/-P <target port>"
parser=optparse.OptionParser(usage) #創(chuàng)建對象實例
parser.add_option('-H',dest='Host',type='string',help='target host') ##需要的命令行參數(shù)
parser.add_option('-P','-p',dest='Port',type='string',help='target ports')
(options,args)=parser.parse_args()
Hosts=options.Host
Port=options.Port
if (Hosts==None)|(Port==None): #如果主機和端口都是空的話
print(parser.usage)
exit(0) #退出
else:
Test(Hosts,Port)
if __name__=='__main__':
main()