wyportmap_mongo.py

#!/usr/bin/env python
# encoding: utf-8

import json
import sys
from time import sleep
from libnmap.process import NmapProcess
from libnmap.reportjson import ReportDecoder, ReportEncoder
from libnmap.parser import NmapParser, NmapParserException
from libnmap.plugins.backendpluginFactory import BackendPluginFactory

# 重试次数 & 超时时间(s)
retrycnt = 1
timeout = 360

# 数据库连接 & 全局扫描参数
#数据库配置直接改BackendPluginFactory.create()的参数,参数里除了plugin_name, dbname和store，剩下的其实都是MongoClient()的参数

#global_options = '-sT -P0 -sV -O --script=banner -p T:21-25,80-89,110,143,443,513,873,1080,1433,1521,1158,3306-3308,3389,3690,5900,6379,7001,8000-8090,9000,9418,27017-27019,50060,111,11211,2049'

#global_options = '-sT -P0 -sV -O --script=banner -p T:21-25,80-89,110,143,443,513,873,1080,1433,1521,1158,1900,2082,2083,2222,2601,2604,3128,3306-3308,3312,3311,3389,3690,4440,5432,5900,6082,6379,6379,7001-7010,7070,7080,7088,7777,7788,7778,8001-8010,8080-8090,8880-8899,9001-9010,9080-9099,9200,9418,11211,27017-27019,28017,50060,50070,50000,111,11211,2049'

#global_options = '-sT -P0 -sV -O --script=banner -p T:21-25,80-89,110,143,443,513,873,1080,1433,1521,1158,1900,2082,2083,2222,2601,2604,3128,3306-3308,3312,3311,3389,3690,4440,5432,5900,6082,6379,6379,7000-9099,9200,9418,11211,27017-27019,28017,50060,50070,50000,111,11211,2049'
#global_options = '-P0 -sS -sV -O --script=banner --open -p23,80 '
global_options = '-P0 -sS -sV -O --script=banner --open '    #默认端口就挺好的

#21,80,443,873,2601,2604,3128,4440,6082,6379,8000,8008,8080,8081,8090,8099,8088,8888,9000,9090,9200,11211,27017,28017
#-p T:102,502,2404,20000,44818,47808,1911,789,9600,1962,20547,5007 

# 处理端口状态
global_log_states = ['open'] # open, filtered, closed, unfiltered

def do_nmap_scan(targets, options=global_options):
    # 运行次数初始化
    trycnt = 0

    while True:
        # 运行时间初始化
        runtime = 0

        if trycnt >= retrycnt:
            print '-' * 50
            return 'retry overflow'

        try:
            nmap_proc = NmapProcess(targets=targets, options=options, safe_mode=False)
            nmap_proc.run_background()

            while nmap_proc.is_running():
                if runtime >= timeout:    # 运行超时，结束掉任务，休息1分钟, 再重启这个nmap任务
                    print '-' * 50
                    print "* timeout. terminate it..."
                    nmap_proc.stop()
                    # 休眠时间
                    sleep(5)
                    trycnt += 1
                    break
                else:
                    print 'running[%ss]:%s' % (runtime, nmap_proc.command)
                    sleep(5)
                    runtime += 5
            if nmap_proc.is_successful():
                print '-' * 50
                print nmap_proc.summary
                return nmap_proc.stdout

        except Exception, e:
            # raise e
            print e
            trycnt += 1
            if trycnt >= retrycnt:
                print '-' * 50
                print '* retry overflow'
                return e

def parse_nmap_report(nmap_stdout, taskid=None):
    try:
        # 处理结果并写入后台数据库
        nmap_report = NmapParser.parse(nmap_stdout)

        # 声明后台对应的ORM数据库处理模型
        #t1 = BackendPluginFactory.create(plugin_name='mongodb', dbname='wyportmap', store='test',host='127.0.0.1',port=27017)
        my_services_backend = BackendPluginFactory.create(plugin_name='backend_service_mongo', dbname='wyportmap', store='portscan_ports',host='127.0.0.1',port=27017)
        my_hosts_backend = BackendPluginFactory.create(plugin_name='backend_host_mongo', dbname='wyportmap', store='portscan_ip',host='127.0.0.1',port=27017)

        # 开始处理扫描结果
        for host in nmap_report.hosts:
                # print("Nmap scan : {0}".format(host.address))
                host.taskid = taskid

                # 处理主机开放的服务和端口l
                for serv in host.services:
                    serv.address = host.address
                    serv.taskid = taskid
                    serv.endtime = host.endtime

                    if serv.state in global_log_states:
                        serv.save(my_services_backend)

                host.save(my_hosts_backend)

        return '* Scan finished'

    except Exception, e:
        # 处理报表出错，返回错误结果
        return e

def run_wyportmap(targets, taskid=None):
    print '-' * 50
    print '* Starting id:(%s) [%s] portmap scan' % (taskid, targets)
    print '-' * 50
    nmap_result = do_nmap_scan(targets)
    print '-' * 50
    if nmap_result == 'retry overflow':
        return 'retry end'
    return parse_nmap_report(nmap_result,taskid)

if __name__ == "__main__":
    if len(sys.argv) == 2:
        #print sys.argv[1]
        print run_wyportmap(sys.argv[1])
        sys.exit(0)
    elif len(sys.argv) == 3:
        print run_wyportmap(sys.argv[1], sys.argv[2])
    else:
        print ("usage: %s targets taskid" % sys.argv[0])
        sys.exit(-1)