Python python-nmap多线程端口扫描脚本（转载）
版权声明：本文为博主原创文章，未经博主允许不得转载。 我就看了几天的python。这个作为练习，若有错误，望指出。 就是基于socket，每个端口去连一下能返回信息就是开启的。一想这么的没必要。 可以去连接，异常出错就是没有开启。 s=socket.socket() s.connect((ip,port)) 但是有的连接要很长时间，那么设置时间： s.settimeout(0.1) 只是ip，没有域名很没意思那么来个域名解析成ip： socket.gethostbyname(Domain) 先不考虑多线程： import socket def getip(Domain): try: return socket.gethostbyname(Domain) except socket.error,e: print '%s: %s'%(Domain,e) return 0 def scan(ip): list1=list() list2=range(1,65535) for port in list2: try: s=socket.socket() s.settimeout(0.1) s.connect((ip,port)) str1= "[+] Port:"+str(port) +" open " print str1 list1.append(port) s.close() except:pass print list1 def main(): print '.........' print 'please input Domain/ip' Domain = raw_input("input:") ip = getip(Domain) print 'ip:'+ip scan(ip) if __name__=='__main__': main() 这里写图片描述 不用线程，一个一个去连接，因为是阻塞的，真的真的是异常的慢。。。 上网查了下别人是怎么写的： import socket import threading from Queue import Queue def scan(port): s = socket.socket() s.settimeout(0.1) if s.connect_ex(('localhost', port)) == 0: print port, 'open' s.close() def worker(): while not q.empty(): port = q.get() try: scan(port) finally: q.task_done() if __name__ == '__main__': q = Queue() map(q.put,xrange(1,65535)) threads = [threading.Thread(target=worker) for i in xrange(100)] map(lambda x:x.start(),threads) q.join() 代码转自：http://www.jb51.net/article/86615.htm 还有个很好的： # -*- coding: utf-8 -*- __author__ = 'Phtih0n' import threading, socket, sys, cmd, os, Queue #扫描常用端口 PortList = [21, 22, 23, 25, 80, 135, 137, 139, 445, 1433, 1502, 3306, 3389, 8080, 9015] #得到一个队列 def GetQueue(list): PortQueue = Queue.Queue(65535) for p in list: PortQueue.put(p) return PortQueue #单IP扫描线程个数 nThread = 20 #线程锁 lock = threading.Lock() #超时时间 Timeout = 3.0 #打开的端口列表 OpenPort = [] class ScanThread(threading.Thread): def __init__(self, scanIP): threading.Thread.__init__(self) self.IP = scanIP def Ping(self, Port): global OpenPort, lock, Timeout sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(Timeout) address = (self.IP, Port) try: sock.connect(address) except: sock.close() return False sock.close() OpenPort.append(Port) if lock.acquire(): print "IP:%s Port:%d" % (self.IP, Port) lock.release() return True class ScanThreadSingle(ScanThread): def __init__(self, scanIP, SingleQueue): ScanThread.__init__(self, scanIP) self.SingleQueue = SingleQueue def run(self): while not self.SingleQueue.empty(): p = self.SingleQueue.get() self.Ping(p) class ScanThreadMulti(ScanThread): def __init__(self, scanIP, PortList): ScanThread.__init__(self, scanIP) self.List = PortList[:] def run(self): for p in self.List: self.Ping(p) class Shell(cmd.Cmd): u'''Py Port Scanner 0.1 使用说明： port [port..] 设置扫描的端口，用逗号分隔。 默认：21, 22, 23, 25, 80, 135, 137, 139, 445, 1433, 1502, 3306, 3389, 8080, 9015 example：port 21,23,25 example: port 1000..2000 example: port 80,443,1000..1500 scan [IP] 扫描某一IP地址 example: scan 192.168.1.5 search [IP begin]-[IP end] 扫描某一IP段 example: search 192.168.1.1-192.168.1.100 time [timeout] 设置超时时间，默认为3秒 example: time 5 cls 清楚屏幕内容 listport 打印端口列表 help 打开本帮助 ''' def __init__(self): cmd.Cmd.__init__(self) reload(sys) sys.setdefaultencoding('utf-8') self.prompt = "Port Scan >>" self.intro = "Py Port Scanner 0.1" def do_EOF(self, line): return True def do_help(self, line): print self.__doc__ #设置端口 def do_port(self, line): global PortList PortList = [] ListTmp = line.split(',') for port in ListTmp: if port.find("..") < 0: if not port.isdigit(): print "输入错误" return False PortList.append(int(port)) else: RangeLst = port.split("..") if not (RangeLst[0].isdigit() and RangeLst[1].isdigit()): raise ValueError exit() for i in range(int(RangeLst[0]), int(RangeLst[1])): PortList.append(i) def do_scan(self, line): global nThread, PortList ThreadList = [] strIP = line SingleQueue = GetQueue(PortList) for i in range(0, nThread): t = ScanThreadSingle(strIP, SingleQueue) ThreadList.append(t) for t in ThreadList: t.start() for t in ThreadList: t.join() def do_search(self, line): global nThread, PortList ThreadList = [] (BeginIP, EndIP) = line.split("-") try: socket.inet_aton(BeginIP) socket.inet_aton(EndIP) except: print "输入错误" return IPRange = BeginIP[0:BeginIP.rfind('.')] begin = BeginIP[BeginIP.rfind('.') + 1:] end = EndIP[EndIP.rfind('.') + 1:] for i in range(int(begin), int(end)): strIP = "%s.%s" % (IPRange, i) t = ScanThreadMulti(strIP, PortList) ThreadList.append(t) for t in ThreadList: t.start() for t in ThreadList: t.join() def do_listport(self, line): global PortList for p in PortList: print p, print '\n' def do_time(self, line): global Timeout try: Timeout = float(line) except: print u"参数错误" def do_cls(self, line): os.system("cls") if '__main__' == __name__: try: os.system("cls") shell = Shell() shell.cmdloop() except: exit() 转自：http://www.jb51.net/article/60165.htm 要学的还有很多。先练习下。先从模仿别人学起。
