基于 Python 的高效 IP 开放端口扫描工具

import socket

def port_scan(target_ip, port):
    """扫描单个端口是否开放"""
    try:
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        sock.settimeout(1)  # 设置超时时间
        result = sock.connect_ex((target_ip, port))
        sock.close()
        return result == 0  # 返回端口是否开放
    except socket.error:
        return False

if __name__ == "__main__":
    target_ip = "127.0.0.1"  # 替换为目标IP
    for port in range(1, 1025):  # 扫描1-1024端口
        if port_scan(target_ip, port):
            print(f"端口 {port} 开放")

import socket
import threading
from queue import Queue

def port_scan(target_ip, port):
    """扫描单个端口"""
    try:
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        sock.settimeout(1)
        result = sock.connect_ex((target_ip, port))
        sock.close()
        return result == 0
    except socket.error:
        return False

def worker(target_ip, queue, open_ports):
    """工作线程函数"""
    while True:
        port = queue.get()
        if port is None:  # 结束信号
            break
        if port_scan(target_ip, port):
            open_ports.append(port)
            print(f"端口 {port} 开放")
        queue.task_done()

def scan_ports(target_ip, start_port=1, end_port=1024, threads=50):
    """多线程扫描主函数"""
    queue = Queue()
    open_ports = []
    
    # 创建工作线程
    for _ in range(threads):
        thread = threading.Thread(target=worker, args=(target_ip, queue, open_ports))
        thread.daemon = True
        thread.start()
    
    # 将端口加入队列
    for port in range(start_port, end_port + 1):
        queue.put(port)
    
    queue.join()  # 等待所有任务完成
    
    # 停止线程
    for _ in range(threads):
        queue.put(None)
    
    print(f"扫描完成，开放端口：{sorted(open_ports)}")

if __name__ == "__main__":
    scan_ports("127.0.0.1", 1, 1024, 100)  # 目标IP, 起始端口, 结束端口, 线程数

from scapy.all import *
import ipaddress

def syn_scan(target_ip, ports):
    """SYN半开放扫描"""
    open_ports = []
    for port in ports:
        packet = IP(dst=target_ip)/TCP(dport=port, flags="S")
        response = sr1(packet, timeout=1, verbose=0)
        if response and TCP in response:
            if response[TCP].flags == 0x12:  # SYN-ACK响应
                send(IP(dst=target_ip)/TCP(dport=port, flags="R"), verbose=0)  # 发送RST复位连接
                open_ports.append(port)
    return open_ports

if __name__ == "__main__":
    target_ip = "192.168.1.1"
    ports = [22, 80, 443, 8080]  # 指定端口列表
    open_ports = syn_scan(target_ip, ports)
    print(f"开放端口：{open_ports}")

import nmap

def nmap_scan(target_ip, ports="1-1024"):
    """调用Nmap扫描"""
    scanner = nmap.PortScanner()
    scanner.scan(target_ip, ports)
    
    for host in scanner.all_hosts():
        print(f"主机: {host} 状态: {scanner[host].state()}")
        for proto in scanner[host].all_protocols():
            print(f"协议: {proto}")
            ports = scanner[host][proto].keys()
            for port in ports:
                print(f"端口: {port} 状态: {scanner[host][proto][port]['state']}")

if __name__ == "__main__":
    nmap_scan("127.0.0.1", "22,80,443")  # 支持端口范围或列表