PyScan - HT's Scanner

Hey Hey,

I'm writing a scanner as a backend to a php web app. The purpose of it is to scan for common ports that virii and trojans open, to try and elmininate such infections from PCs in the College Residence. I called it PyScan because that seemed simple enough and it seems there are already several pieces of software with that name. I was going to change it but then said, "To hell with it", basically because I can't think of a name, if Anyone can thing of a name and wants to post it here, or PM me. I'll consider them and work on changing it and throw out an acknowledgement in the files. When it's complete I plan on publishing it and creating a website dedicated to it and future versions. However for now it is a single python file. Some of you may have to remove the #! line or modify it. I did that for simplicity so that you can simply type ./pyscan.py however if you prefer to type python <script> that should work also.

From the documentation in the file:

Quote:

---

PyScan 0.1b by Tyler Reguly [[email protected]]

Description: Developed for use in College Technical Support Centre for Scanning Ports which
Trojans and Virii are known to open. Only some of the features are currently implemented
and it is buggy as all hell. However it will scan a single IP address checking the ports listed
in portlist.txt

Development Plans: The usage of this file gives away some of the upcoming plans. Which will include
HTML output (The plan of this is to use it as the back-end for a scanning website),
Class C Network Scanning and command-line port listing. There are also plans to
add threading so that several ports/hosts can be scanned at one time, however
this is still several versions down the road.

Comments: So far about 3 hours have gone into the development of this program. Comments, bug
reports, suggestions, complaints and flames are welcome at the above email address.

---

If you are so include to check it out pyscan.py -h will display the usage menu and a list of commands, implemented or otherwise. A Basic scan is performed through ./pyscan.py -i <ip address>.

Peace,
HT

w00t

Well you could call it TRsP 0.1b ( more to Jacks taste) or TRsPscan 0.1b or of course HTsScan 0.1b. You could also use an acronium (sorry spelling) using PCs in the College Residence so it would be PCsCR or even PCPscanCR or PyScanPCCR. Another idea would be GYAscan, for GotYourA$$scan.
There you have a few scatter brained idea from the master of scatter.

How can I unzip this thing in windows?

:confused:

Quote:

---

Originally posted here by Soda_Popinsky
How can I unzip this thing in windows?

:confused:

---

Hey Hey,

WinRar will open .gz files, you can also get a gzip command line app, however it's prolly easier for ya to get WinRar.

Peace,
HT

Hey Hey,

I've done some work here's the next version. It's still a single file, however I believe I will attempt to create modules at some point just to clean it up a bit. I've also included the portlist.txt that I've been using for testing purposes, you can create your own, but I thought it might save you some time. Again feedback is always appreciated. Tonights goal is to add Class C Scanning support and possible get threading going.

To give you a rundown of the improvements/additions from the last version.
- Added UDP Scan (Doesn't seem to function properly on our network, this is what I'm really looking for feedback on... I get all ports open)
- Added HTML output (Fully functional as far as the program is supporting at this point. Generates a simple table with the ports and their status. Eventually it will only list open ports in the table)
- Removed error that occurs when you entire -t (timeout) without an integer value.

Anyways feedback is always appreciated. I'm still looking for more names, so far it's going to either stay as PyScan or become TRsPscan. Once the back-end is fully functional, I will start in on a PHP front-end.

Linux users can tar -zxvf and Windows users should be able to open it with WinRar.

Peace,
HT

Winzip will also open gz files as well as .tar.gz files - thought it was worth a mention since it's probably the most popular Zip program for Windows.

Hey Hey,

I've added Class C scanning, so for those of you that are testing it.. Here's the next release. I've made a few more small bug fixes.

Peace,
HT

I get the following error when running it under Windows using the latest version of Python:

Code:

---

File "pyscan.py", line 95
'''
  ^
SyntaxError: invalid syntax

---

I haven't changed the file at all from the latest release, except I changed the shebang line to:

Code:

---

#!C:/python/python.exe

---

which is where Python is located on my machine (same way as I would for Perl scripts) - and it is also in my PATH environment variable so I can execute python [filename] from anywhere in the directory tree.

Any idea what might be causing this? I'd give it a try on Linux only Gentoo/Xfree doesn't like me at the moment. :(

pwaring, I don't know anything about python script but try this:
- go to line 92
- delete the letter b (right after the colon)
- move these ''' characters to the next line

(I think the ''' marks a comment until it finds another ''')

HT, I was wondering tho why the script didn't tell me the options that I need to enter (I run it using Cygwin's python).

$ python pyscan.py
Traceback (most recent call last):
File "pyscan.py", line 209, in ?
main(sys.argv[1:])
File "pyscan.py", line 171, in main
tcpipscan()
File "pyscan.py", line 54, in tcpipscan
if not scansocket.connect_ex((ipaddress,port)) :
NameError: global name 'ipaddress' is not defined

I see there is already a usage() function that is supposed to be called by main() (I think, again, I don't know anything about python) when no options are entered. Anyway, after reading the usage IN the script, I found that I need to enter at least -i <IP Address>.

$ python pyscan.py -i testbox
Port 22 is open.
Port 23 is closed.
Port 25 is closed.
Port 110 is closed.
Port 111 is closed.
Port 6000 is closed.
Port 80 is closed.
Port 135 is open.
Port 139 is open.
Port 5900 is closed.
Port 5800 is closed.
Port 21 is closed.

And yes, the UDP scan is not functioning properly (not to mention the scan is VERY fast).

$ python pyscan.py -u -i testbox
Port 22 is open.
Port 23 is open.
Port 25 is open.
Port 110 is open.
Port 111 is open.
Port 6000 is open.
Port 80 is open.
Port 135 is open.
Port 139 is open.
Port 5900 is open.
Port 5800 is open.
Port 21 is open.

Peace always,
<jdenny>

Thanks jdenny - that fixed the problem. I'm now getting the same errors as you if I don't add the correct command line flags - something like that would be useful to have in.

Edit: I ran the script against my router from the outside and it says that port 23 is open (telnet) but Shield's Up at grc.com disagrees with this and says that the port is stealthed (as is port 80 - but pyscan says that this is closed).

Hey Hey,

Thanks for the feedback. That b will be the death of me. I'm using an IDE called Eric3 and everytime I save the code, it puts that b in there and i have to go in with vi and remove it. I guess I forgot to that time.

As for the crashing when you give no options, this is a new one for me. It was just going blank before [That's right, I modified how it handled variables]. I just went under the assumption that most people would attempt -h after the command. I guess I shouldn't make assumptions. I'll fix that for the next beta.

As far as the UDP Scan, I'm not sure what's going on there.. I'm going to have to see if python's UDP implementation is bogus.

As far as saying that port 23 is open when it's not, that's an interesting one. That's the first report I've had of a false positive. Basically the way the code works is it attempts a connection, if it could attempt, it breaks off the connection and returns true or false. I'll take a look into this and see if I can replicate it any further.

Thanks guys (and gals).

Peace,
HT

Hey Hey,

I've still yet to find false positives from the TCP side of the scanner, but I'm still testing. The UDP side is another story.... Anyways Here's the latest release.

I've fixed the problem that jenny was having, now if you enter the command only, it'll display the usage and exit cleanly. It also excepts keyboard interupts (ctrl+c) and exits cleaning when it recieves those. I've fixed some bugs in the html output and cleaned up the error with the extra b on line 92. I also modified the code so that it only displays open ports. My next goal is to modify it to accept the ports from the command line. I'll be working on that for the next 4 hours, but I wanted to throw this up on the off chance that someone would solve my UDP problem

Peace,
HT

Hey Hey,

For those of you following this thread. I have posted the first RC in another thread as the code is not up for review but use. If you wish to download this release or read the related posts you can view them here -- http://www.antionline.com/showthread...&postid=736839

Peace,
HT