Python调用Nmap进行扫描
1 #coding=utf-8 2 3 import nmap 4 import optparse 5 import threading 6 import sys 7 import re 8 ''' 9 需安装python_nmap包，支持2.x以及3.x 10 python_nmap包提供了python调用nmap的一系列接口 11 12 （一）重要类及方法： 13 1.创建nmap扫描器 14 class PortScanner() 15 __init__(self， nmap_search_path=('nmap'， '/usr/bin/nmap'， '/usr/local/bin/nmap'， '/sw/bin/nmap'， '/opt/local/bin/nmap')) 16 Initialize PortScanner module 17 18 * detects nmap on the system and nmap version 19 * may raise PortScannerError exception if nmap is not found in the path 20 21 :param nmap_search_path: tupple of string where to search for nmap executable. Change this if you want to use a specific version of nmap. 22 :returns: nothing 23 2.扫描器方法 24 scan(self， hosts='127.0.0.1'， ports=None， arguments='-sV'， sudo=False) 25 Scan given hosts 26 27 May raise PortScannerError exception if nmap output was not xml 28 29 Test existance of the following key to know if something went wrong : ['nmap']['scaninfo']['error'] 30 If not present， everything was ok. 31 32 :param hosts: string for hosts as nmap use it 'scanme.nmap.org' or '198.116.0-255.1-127' or '216.163.128.20/20' 33 :param ports: string for ports as nmap use it '22，53，110，143-4564' 34 :param arguments: string of arguments for nmap '-sU -sX -sC' 35 :param sudo: launch nmap with sudo if True 36 37 :returns: scan_result as dictionnary 38 39 （二）例子 40 import nmap 41 scanner = nmap.PortScanner() #nmap_search_path已包含了nmap所在路径，若默认路径中没有nmap，则需指出 42 results = scanner.scan(hosts='192.168.2.1'，ports='80') 43 pprint.pprint(results) 44 {'nmap': {'command_line': 'nmap -oX - -p 80 -sV 192.168.2.1'， 45 'scaninfo': {'tcp': {'method': 'syn'， 'services': '80'}}， 46 'scanstats': {'downhosts': '0'， 47 'elapsed': '11.59'， 48 'timestr': 'Thu Jul 21 10:08:34 2016'， 49 'totalhosts': '1'， 50 'uphosts': '1'}}， 51 'scan': {'192.168.2.1': {'addresses': {'ipv4': '192.168.2.1'， 52 'mac': 'D0:C7:C0:6A:F6:A0'}， 53 'hostnames': []， 54 'status': {'reason': 'arp-response'， 55 'state': 'up'}， 56 'tcp': {80: {'conf': '3'， 57 'cpe': ''， 58 'extrainfo': ''， 59 'name': 'http'， 60 'product': ''， 61 'reason': 'no-response'， 62 'state': 'filtered'， 63 'version': ''}}， 64 'vendor': {'D0:C7:C0:6A:F6:A0': 'Tp-link ' 65 'Technologies'}}}} 66 67 ''' 68 def anlyze_port(target_port): 69 #解析-p参数传入的值，返回端口列表 70 try: 71 pattern = re.compile(r'(d+)-(d+)') #解析连接符-模式 72 match = pattern.match(target_port) 73 if match: 74 start_port = int(match.group(1)) 75 end_port = int(match.group(2)) 76 return([x for x in range(start_port，end_port + 1)]) 77 else: 78 return([int(x) for x in target_port.split('，')]) 79 except Exception as err: 80 print('请注意错误1:'，sys.exc_info()[0]，err) 81 print(parser.usage) 82 exit(0) 83 84 def portscanner(target_host，target_port): 85 scanner = nmap.PortScanner() 86 results = scanner.scan(hosts=target_host，ports=target_port，arguments='-T4 -A -v -Pn ') #禁ping的快速扫描 87 print('扫描语句是：'，results['nmap']['command_line']) 88 print('[*]主机' + target_host + '的' + str(target_port) + '端口状态为：' + results['scan'][target_host]['tcp'][int(target_port)]['state']) 89 90 def main(): 91 usage = 'Usage:%prog --host <target_host> --port <target_port>' 92 parser = optparse.OptionParser(usage，version='v1.0') 93 parser.add_option('--host'，dest='target_host'，type='string'， 94 help='需要扫描的主机，域名或IP') 95 parser.add_option('--port'，dest='target_port'，type='string'， 96 help='需要扫描的主机端口，支持1-100或21，53，80两种形式') 97 (options，args) = parser.parse_args() 98 if options.target_host == None or options.target_port == None: 99 print(parser.usage) 100 exit(0) 101 else: 102 target_host = options.target_host 103 target_port = options.target_port 104 105 target_port = anlyze_port(target_port) 106 for port in target_port: 107 t = threading.Thread(target=portscanner，args=(target_host，str(port))) 108 t.start() 109 110 if __name__ == '__main__': 111 main() 运行后的结果为： 1 c:python34python.exe NmapScanner.py --host 192.168.1.1 --port 80 2 扫描语句是： nmap -oX - -p 80 -T4 -A -v -Pn 192.168.1.1 3 [*]主机192.168.1.1的80端口状态为：filtered
