Python網路掃描滲透測試技術實踐

import os

response = os.popen("ping -n 1 10.0.0.1").readlines()
for line in response:
    print(line)

import os
import platform

def ping_ip(ip_address):
    if platform.system().lower() == 'windows':
        ping_cmd = f'ping -n 1 {ip_address}'
    else:
        ping_cmd = f'ping -c 1 {ip_address}'
    
    response = os.popen(ping_cmd).readlines()
    for line in response:
        print(line.strip())

# 範例使用
ping_ip('10.0.0.1')

import socket
from datetime import datetime

net = raw_input("Enter the Network Address ")
net1 = net.split('.')
a = '.'

net2 = net1[0] + a + net1[1] + a + net1[2] + a
st1 = int(raw_input("Enter the Starting Number "))
en1 = int(raw_input("Enter the Last Number "))
en1 = en1 + 1

t1 = datetime.now()

def scan(addr):
    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    socket.setdefaulttimeout(1)
    result = sock.connect_ex((addr, 135))
    if result == 0:
        return 1
    else:
        return 0

def run1():
    for ip in xrange(st1, en1):
        addr = net2 + str(ip)
        if scan(addr):
            print(addr, "is live")

run1()

t2 = datetime.now()
total = t2 - t1
print("scanning complete in ", total)

import datetime
import collections
import threading

# 定義網路位址輸入
net = input("Enter the Network Address ")
net1 = net.split('.')
a = '.'

# 取得起始和結束 IP 地址範圍
net2 = input("Enter the Starting Number ")
net3 = int(net2)
net4 = input("Enter the Last Number ")
net5 = int(net4)

# 計算總共需要掃描的 IP 地址數量
net_final = int(net5) - int(net3)

# 建立有序字典用於儲存結果
dic = collections.OrderedDict()

# 定義 Ping 函式
def scan(addr):
    # 省略 Ping 操作的具體實作
    output = os.popen("ping -n 1 " + addr).read()
    if 'TTL=' in output:
        dic[addr] = output

# 多執行緒類別定義
class myThread(threading.Thread):
    def __init__(self, start, end):
        threading.Thread.__init__(self)
        self.start = start
        self.end = end

    def run(self):
        for i in range(self.start, self.end):
            addr = net1[0] + a + net1[1] + a + net1[2] + a + str(i)
            scan(addr)

# 設定每個執行緒處理的 IP 地址數量
num_threads = 20
thread_list = []

# 建立並啟動多個執行緒
for i in range(num_threads):
    start = net3 + i * (net_final // num_threads)
    end = start + (net_final // num_threads)
    thread = myThread(start, end)
    thread_list.append(thread)
    thread.start()

# 等待所有執行緒完成
for thread in thread_list:
    thread.join()

# 列印存活主機的 IP 地址
for key in dic:
    print(key, '
---
> Live')

print('Number of Threads active:', threading.active_count())
print('Exiting Main Thread')

import threading
import time
import socket

def scan(ip):
    try:
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.connect((ip, 80))
        print(f"{ip} --> Live")
    except Exception as e:
        pass
    finally:
        s.close()

def main():
    network = input("Enter the Network Address ")
    start = int(input("Enter the starting Number "))
    end = int(input("Enter the last Number "))
    num_threads = 4
    total_ips = end - start + 1
    total_threads = total_ips // num_threads

    threads = []
    for i in range(num_threads):
        thread = threading.Thread(target=scan_ips, args=(network, start + i * total_threads, start + (i + 1) * total_threads - 1))
        threads.append(thread)
        thread.start()

    for thread in threads:
        thread.join()

    print("Exiting Main Thread")

if __name__ == "__main__":
    main()

import socket
import struct
import threading
import time

def send_ping(sock, ip):
    # 建立 ICMP echo 請求封包
    packet = struct.pack('!BBHHH', 8, 0, 0, 0, 1)
    packet = packet + b'abcdefgh'
    try:
        sock.sendto(packet, (ip, 0))
    except Exception as e:
        print(f"Error sending ping to {ip}: {e}")

def sniffing(sock):
    while True:
        try:
            data, addr = sock.recvfrom(1024)
            # 解析 ICMP 回應封包
            icmp_type, icmp_code = struct.unpack('!BB', data[20:22])
            if icmp_type == 0:  # ICMP echo 回應
                print(f"{addr[0]} --> Live")
        except Exception as e:
            pass

def main():
    # 建立原始通訊端
    sock = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_ICMP)
    # 建立並啟動 sniffing 執行緒
    sniff_thread = threading.Thread(target=sniffing, args=(sock,))
    sniff_thread.daemon = True
    sniff_thread.start()

    # 傳送 ICMP echo 請求
    for ip in ips_to_scan:
        send_ping(sock, ip)

if __name__ == "__main__":
    main()