python调用扫描仪_python调用nmap进行扫描

1 #coding=utf-8

2

3 importnmap4 importoptparse5 importthreading6 importsys7 importre8 '''

9 需安装python_nmap包，支持2.x以及3.x10 python_nmap包提供了python调用nmap的一系列接口11

12 (一)重要类及方法：13 1.创建nmap扫描器14 class PortScanner()15 __init__(self, nmap_search_path=('nmap', '/usr/bin/nmap', '/usr/local/bin/nmap', '/sw/bin/nmap', '/opt/local/bin/nmap'))16 Initialize PortScanner module17

18 * detects nmap on the system and nmap version19 * may raise PortScannerError exception if nmap is not found in the path20

21 :param nmap_search_path: tupple of string where to search for nmap executable. Change this if you want to use a specific version of nmap.22 :returns: nothing23 2.扫描器方法24 scan(self, hosts='127.0.0.1', ports=None, arguments='-sV', sudo=False)25 Scan given hosts26

27 May raise PortScannerError exception if nmap output was not xml28

29 Test existance of the following key to know if something went wrong : ['nmap']['scaninfo']['error']30 If not present, everything was ok.31

32 :param hosts: string for hosts as nmap use it 'scanme.nmap.org' or '198.116.0-255.1-127' or '216.163.128.20/20'33 :param ports: string for ports as nmap use it '22,53,110,143-4564'34 :param arguments: string of arguments for nmap '-sU -sX -sC'35 :param sudo: launch nmap with sudo if True36

37 :returns: scan_result as dictionnary38

39 (二)例子40 import nmap41 scanner = nmap.PortScanner() #nmap_search_path已包含了nmap所在路径，若默认路径中没有nmap,则需指出42 results = scanner.scan(hosts='192.168.2.1',ports='80')43 pprint.pprint(results)44 {'nmap': {'command_line': 'nmap -oX - -p 80 -sV 192.168.2.1',45 'scaninfo': {'tcp': {'method': 'syn', 'services': '80'}},46 'scanstats': {'downhosts': '0',47 'elapsed': '11.59',48 'timestr': 'Thu Jul 21 10:08:34 2016',49 'totalhosts': '1',50 'uphosts': '1'}},51 'scan': {'192.168.2.1': {'addresses': {'ipv4': '192.168.2.1',52 'mac': 'D0:C7:C0:6A:F6:A0'},53 'hostnames': [],54 'status': {'reason': 'arp-response',55 'state': 'up'},56 'tcp': {80: {'conf': '3',57 'cpe': '',58 'extrainfo': '',59 'name': 'http',60 'product': '',61 'reason': 'no-response',62 'state': 'filtered',63 'version': ''}},64 'vendor': {'D0:C7:C0:6A:F6:A0': 'Tp-link '65 'Technologies'}}}}66

67 '''

68 defanlyze_port(target_port):69 #解析-p参数传入的值，返回端口列表

70 try:71 pattern = re.compile(r'(\d+)-(\d+)') #解析连接符-模式

72 match =pattern.match(target_port)73 ifmatch:74 start_port = int(match.group(1))75 end_port = int(match.group(2))76 return([x for x in range(start_port,end_port + 1)])77 else:78 return([int(x) for x in target_port.split(',')])79 exceptException as err:80 print('请注意错误1:',sys.exc_info()[0],err)81 print(parser.usage)82 exit(0)83

84 defportscanner(target_host,target_port):85 scanner =nmap.PortScanner()86 results = scanner.scan(hosts=target_host,ports=target_port,arguments='-T4 -A -v -Pn') #禁ping的快速扫描

87 print('扫描语句是：',results['nmap']['command_line'])88 print('[*]主机' + target_host + '的' + str(target_port) + '端口状态为：' + results['scan'][target_host]['tcp'][int(target_port)]['state'])89

90 defmain():91 usage = 'Usage:%prog --host --port '

92 parser = optparse.OptionParser(usage,version='v1.0')93 parser.add_option('--host',dest='target_host',type='string',94 help='需要扫描的主机,域名或IP')95 parser.add_option('--port',dest='target_port',type='string',96 help='需要扫描的主机端口，支持1-100或21,53,80两种形式')97 (options,args) =parser.parse_args()98 if options.target_host == None or options.target_port ==None:99 print(parser.usage)100 exit(0)101 else:102 target_host =options.target_host103 target_port =options.target_port104

105 target_port =anlyze_port(target_port)106 for port intarget_port:107 t = threading.Thread(target=portscanner,args=(target_host,str(port)))108 t.start()109

110 if __name__ == '__main__':111 main()