add a third part nmap scripting (no threading) just for reference. it uses socket lib.

Network_and_802.11/scanner/nmap_phillips.py

@@ -0,0 +1,142 @@
+#-------------------------------------------------------------------------------
+# Name:         nmap.py
+# Purpose:      Replicates limited nmap functionality using python
+# Author:       phillipsme
+# Created:      12/08/2014
+# Copyright:    (c) phillipsme 2014
+# Licence:      Free to use, free to have fun!
+# Version:      beta!!! (0.2)
+# ToDo:         add threading
+#-------------------------------------------------------------------------------
+import socket
+import argparse
+import sys
+import time
+
+def main():
+    # Output command line args to screen
+    if args.verbose: printmsg("Arguments used:"); print args ;
+
+    starttime=time.time()
+    # Start Scanning
+    results={}
+    for target in targets:
+        results[target]= portscan(target,ports,args.tcpscan,args.udpscan,args.verbose)
+    printmsg(("Total scantime %.2f seconds") % (time.time()-starttime))
+
+    for target in results:
+        print "%s TCP:%s  UDP:%s" % (target,results[target][0],results[target][1])
+    return results
+
+def portscan(target,ports,tcp,udp,verbose):
+    #target=IPaddr,ports=list of ports,tcp=true/false,udp=true/false,verbose=true/false
+    tcpports=[]
+    udpports=[]
+    targetstarttime=time.time()
+    if tcp:
+        for portnum in ports:
+            try:
+                s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+                s.settimeout(0.01)
+                s.connect((target, portnum))
+            except Exception:
+                failvar = 0
+                if verbose: print "%d/tcp \tclosed" % (portnum)
+            else:
+                if verbose: print "%d/tcp \topen"% (portnum)
+                tcpports.append(portnum)
+            s.close()
+    if udp:
+        for portnum in ports:
+            try:
+                s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
+                s.settimeout(0.1)
+                s.sendto("--TEST LINE--", (target, portnum))
+                recv, svr = s.recvfrom(255)
+            except Exception, e:
+                try: errno, errtxt = e
+                except ValueError:
+                    if verbose: print "%d/udp \topen"% (portnum)
+                    udpports.append(portnum)
+                else:
+                    if verbose: print "%d/udp \tclosed" % (portnum)
+            s.close()
+    printmsg(("Scanned %s in %.2f seconds - Open: %iTCP, %iUDP" % \
+                (target,time.time()-targetstarttime,len(tcpports),len(udpports))))
+    return tcpports, udpports
+
+def errormsg(msg): print "[!] Error: %s" % (msg) ; sys.exit(1)
+def printmsg(msg): print "[+] nmap.py: %s" % (msg)
+
+def iprange(addressrange): # converts a ip range into a list
+    list=[]
+    first3octets = '.'.join(addressrange.split('-')[0].split('.')[:3]) + '.'
+    for i in range(int(addressrange.split('-')[0].split('.')[3]),int(addressrange.split('-')[1])+1):
+        list.append(first3octets+str(i))
+    return list
+
+def ip2bin(ip):
+    b = ""
+    inQuads = ip.split(".")
+    outQuads = 4
+    for q in inQuads:
+        if q != "": b += dec2bin(int(q),8); outQuads -= 1
+    while outQuads > 0: b += "00000000"; outQuads -= 1
+    return b
+
+def dec2bin(n,d=None):
+    s = ""
+    while n>0:
+        if n&1: s = "1"+s
+        else: s = "0"+s
+        n >>= 1
+    if d is not None:
+        while len(s)<d: s = "0"+s
+    if s == "": s = "0"
+    return s
+
+def bin2ip(b):
+    ip = ""
+    for i in range(0,len(b),8):
+        ip += str(int(b[i:i+8],2))+"."
+    return ip[:-1]
+
+def returnCIDR(c):
+    parts = c.split("/")
+    baseIP = ip2bin(parts[0])
+    subnet = int(parts[1])
+    ips=[]
+    if subnet == 32: return bin2ip(baseIP)
+    else:
+        ipPrefix = baseIP[:-(32-subnet)]
+        for i in range(2**(32-subnet)): ips.append(bin2ip(ipPrefix+dec2bin(i, (32-subnet))))
+        return ips
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description='nmap.py - Replicates limited nmap functionality in python')
+    parser.add_argument('-v', '--verbose', action='store_true', help='Enable this for full output')
+    parser.add_argument('-sS', '--tcpscan', action='store_true', help='Enable this for TCP scans')
+    parser.add_argument('-sU', '--udpscan', action='store_true', help='Enable this for UDP scans')
+    parser.add_argument('-p', '--ports', default='1-1024', help='The ports you want to scan (21,22,80,135-139,443,445)')
+    parser.add_argument('-t', '--targets', help='The target(s) you want to scan (192.168.0.1)')
+    if len(sys.argv)==1: parser.print_help(); sys.exit(0)
+    args = parser.parse_args()
+
+    # Set target (and convert for FQDN)
+    targets=[]
+    if args.targets:
+        if '/' in args.targets: #found cidr target
+            targets = returnCIDR(args.targets)
+        elif '-' in args.targets:
+            targets = iprange(args.targets)
+        else:
+            try: targets.append(socket.gethostbyname(args.targets)) # get IP from FQDN
+            except: errormsg("Failed to translate hostname to IP address")
+    else: parser.print_help(); errormsg("You need to set a hostname")
+
+    # Set ports
+    if args.ports == '-': args.ports = '1-65535'
+    ranges = (x.split("-") for x in args.ports.split(","))
+    ports = [i for r in ranges for i in range(int(r[0]), int(r[-1]) + 1)]
+
+    main()