python新手灰帽脚本练习---简易端口扫描

总体思路：

调用了socket模块并用connect()函数链接了相应的IP和端口号，用send()函数发送数据并用recv()函数检查响应.

# -*- coding:utf-8 -*-

__author__='Dou—wei'

import socket
import sys


def scanner(ip,port):                                                    
    try:
        s = socket.socket()                                                 #创建socket
        print "[-] Attempting to connect to " + ip + ":" + str(port)        
        s.connect((ip,port))                                                #连接指定地址
        s.send('try')                                                       
        banner = s.recv(1024)                                               #获取返回信息
        if banner:                                                          #判断返回是否为空
            print "[+] Port " + str(port) + " open: 
" + banner
        s.close()
    except Exception,e:
        print e

def main():
    ip = sys.argv[1]
    port = int(sys.argv[2])
    scanner(ip,port)

if __name__=='__main__':
    main()

效果如图：

也可以自行添加列表，通过遍历实现批量扫描：

# -*- coding:utf-8 -*-

__author__='Dou—wei'

import socket
import sys


def scanner(hosts,ports):
    for host in hosts:
        for port in ports:                                                    
            try:
                s = socket.socket()                                                 #创建socket
                print "[-] Attempting to connect to " + host + ":" + str(port)        
                s.connect((host,port))                                                #连接指定地址
                s.send('try')                                                       
                banner = s.recv(1024)                                               #获取返回信息
                if banner:                                                          #判断返回是否为空
                    print "[+] Port " + str(port) + " open: 
" + banner
                s.close()
            except Exception,e:
                print e

def main():
    hosts = ['127.0.0.1','192.168.1.1']
    ports = [21,22,25,80,3389,8080]
    scanner(hosts,ports)

if __name__=='__main__':
    main()

效果如图：