四层发现-TCP发现

 1 #!/usr/bin/python
 2 from scapy.all import *
 3 if len(sys.argv) != 2:
 4     print "this script need a arg, like: ./tcpScan.py 192.168.0.0"
 5     sys.exit()
 6 
 7 address = str(sys.argv[1])
 8 prefix = address.split(".")[0] + "." + address.split(".")[1] + "." + address.split(".")[2] + "."
 9 
10 for addr in range(100, 254):
11     response = sr1(IP(dst = prefix + str(addr)) / TCP(dport = 2222, flags = "A"), timeout = 0.1, verbose = 0)
12     try:
13         if int(response[TCP].flags) == 4:
14             print prefix + str(addr)
15     except:
16         pass