Python编写的ARP扫描工具

Posted 2020-10-09

源码如下：

 1 rom scapy.all import *
 2 import threading
 3 import argparse
 4 import logging
 5 import re
 6 
 7 logging.getLogger(‘scapy.runtime‘).setLevel(logging.ERROR)
 8 
 9 def parse_ip(targets):
10     ‘‘‘
11     解析192.168.1.1-254形式的IP段，分解成IP列表
12     ‘‘‘
13     _split = targets.split(‘-‘)
14     first_ip = _split[0]
15     ip_split = first_ip.split(‘.‘)
16     ipdot4 = range(int(ip_split[3]),int(_split[1])+1)
17     ipaddrs = [ip_split[0]+‘.‘+ip_split[1]+‘.‘+ip_split[2]+‘.‘+str(p) for p in ipdot4]
18     return ipaddrs
19 
20 def arp_scan(target_ip):
21     ‘‘‘
22     通过scapy的sr1函数进行ARP扫描
23     ‘‘‘
24     try:
25         ans = sr1(ARP(pdst=target_ip),timeout=1,verbose=False)
26         if ans:
27             return ans
28     except Exception:
29         print ‘[-]发包错误‘
30         exit(1)
31 
32 def parse_arp(target_ip):
33     ‘‘‘
34     解析收到的ARP reply包，采集IP及其对应的MAC
35     ‘‘‘
36     ans = arp_scan(target_ip)
37     if ans:
38         if ans.haslayer(‘ARP‘) and ans.fields[‘op‘] == 2:
39             print ‘[+] IP:%s => MAC:%s‘ % (ans.fields[‘psrc‘],ans.fields[‘hwsrc‘])
40 
41 if __name__ == ‘__main__‘:
42     usage = ‘python %(prog)s -t [targets]‘
43     parser = argparse.ArgumentParser(usage=usage,epilog=‘以上做为说明，祝好运！‘,description=‘说明：指定IP或IP段进行ARP扫描.‘,version=‘V1.0‘)
44     parser.add_argument(‘-t‘,action=‘store‘,dest=‘targets‘,help=‘targets为IP或IP段，如192.168.1.x或192.168.1.1-254‘)
45 
46     args = parser.parse_args()
47     if args.targets == None:
48         parser.print_help()
49     elif (not re.match(r‘\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$‘,args.targets)) and 50             (not re.match(r‘\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}-\d{1,3}$‘,args.targets)):
51         parser.print_help()
52     else:
53         targets = args.targets
54 
55 
56     if re.match(r‘\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$‘,targets):
57         ip = targets
58         parse_arp(ip)
59     elif re.match(r‘\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}-\d{1,3}$‘,targets):
60         ips = parse_ip(targets)
61         for ip in ips:
62             t = threading.Thread(target=parse_arp,args=(ip,))
63             t.start()

运行结果如下：

1 python exp2.py -t 192.168.1.1-254
2 [+] IP:192.168.1.1 => MAC:14:75:90:XX:XX:XX
3 [+] IP:192.168.1.111 => MAC:c6:36:55:XX:XX:XX
4 [+] IP:192.168.1.100 => MAC:68:3e:34:XX:XX:XX
5 [+] IP:192.168.1.112 => MAC:84:38:38:XX:XX:XX
6 [+] IP:192.168.1.114 => MAC:6c:8d:c1:XX:XX:XX
7 [+] IP:192.168.1.103 => MAC:84:38:38:XX:XX:XX
8 [+] IP:192.168.1.102 => MAC:58:1f:28:XX:XX:XX