masscan简介
- 开源、免费的端口扫描器，获取主机开放的端口和端口信息。
- 速度非常快，6分钟可以扫描整个互联网，1台机器每秒可传输1000万个数据包。
- 只做SYN扫描、不首先ping主机，没有DNS解析发生，扫描完全随机化
masscan安装
sudo apt-get install git gcc make libpcap-dev
git clone https://github.com/robertdavidgraham/masscan
cd masscan
make
masscan使用方法1
./masscan 172.16.0.0/16 -p0-65535 --max-rate 200000 --banners -oJ result.json
- -p 扫描所有端口指定
- --banners 获取banner值
- --max-rate 每秒发的包数量，根据机器和网络情况自行选择
-
-oJ result.json 将扫描结果输出为json文件
image.png
masscan使用方法2
./masscan -p0-65535 -iL ip.txt --max-rate 100000 --banners -oJ f.json
-
-iL 扫描文件中的ip地址
image.png
image.png
python脚本解析masscan结果
import json
from openpyxl import Workbook
import xlsxwriter
import socket
def get_list(filepath):
f = open(filepath,encoding='utf-8')
c = json.load(f)
list = []
for i in c:
ip = i['ip']
port = str(i['ports'][0]['port'])
status = 'open'
try:
if i['ports'][0]['service']:
name = i['ports'][0]['service']['name']
banner = str(i['ports'][0]['service']['banner'])
except:
name = ''
banner = ''
line = [ip,port,status,name,banner]
list.append(line)
return list
def quchong(l1):
l2 =[]
for data1 in l1:
for data2 in l1:
if data1[0]==data2[0] and data1[1]==data2[1]:
if data1[3] ==''and data2[3] !='':
# print(data1,data2)
l2.append(data1)
for i in l2:
try:
l1.remove(i)
except:pass
l1 = [list(t) for t in set(tuple(_) for _ in l1)]
return l1
def write_excle(list):
f = xlsxwriter.Workbook('port.xlsx')
worksheet1 = f.add_worksheet('扫描信息')
worksheet2 = f.add_worksheet('主机ip列表')
worksheet1.write(0, 0, 'ip')
worksheet1.write(0, 1, '端口')
worksheet1.write(0, 2, '状态')
worksheet1.write(0, 3, '服务')
worksheet1.write(0, 4, 'banner')
worksheet2.write(0, 0, '主机ip')
newlist= []
for i in list:
newlist.append(i[0])
newlist=set(newlist)
total1 = 0
total2 = len(newlist)
newlist=sorted(newlist, key=socket.inet_aton)
for index, p in enumerate(list):
total1+=1
for j, q in enumerate(p):
worksheet1.write(index + 1, j, q)
for index, p in enumerate(newlist):
worksheet2.write(index + 1, 0, p)
f.close()
return total1,total2
if __name__ == '__main__':
filepath = 'C:/1/result.json' #填写要解析masscan扫描json格式报告的文件路径
result = get_list(filepath)
result = quchong(result)
sum = write_excle(result)
print('共检测到存活主机%d个，端口信息%d条'% (sum[1],sum[0]))
C:\Users\m\PycharmProjects\untitled\venv\Scripts\python.exe C:/Users/m/PycharmProjects/untitled/venv/解析masscanjson脚本.py
共检测到存活主机1782个，端口信息17058条
-
excle结果如下图
image.png
