{"id":1200,"date":"2023-09-11T22:40:24","date_gmt":"2023-09-11T13:40:24","guid":{"rendered":"https:\/\/tippang.net\/?p=1200"},"modified":"2023-09-11T22:40:27","modified_gmt":"2023-09-11T13:40:27","slug":"mastering-network-scanning-with-python","status":"publish","type":"post","link":"https:\/\/tippang.net\/?p=1200","title":{"rendered":"Mastering Network Scanning with Python"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Network scanning is the process of discovering devices on a network and identifying their open ports and services. It is an essential part of network security, allowing system administrators to identify potential vulnerabilities and attack vectors. In this article, we will explore network scanning techniques using Python.<\/p>\n\n\n\n\n\n\n\n

Port Scanning<\/h2>\n\n\n\n

Port scanning is a technique used to identify open ports on a target machine. Python provides several libraries for implementing port scanning, including the socket and nmap libraries.<\/p>\n\n\n\n

Using the socket Library<\/h3>\n\n\n\n

To perform a basic port scan using the socket library, you can use the following code:<\/p>\n\n\n\n

import socket\n\ntarget_host = \"192.168.1.1\"\ntarget_ports = [21, 22, 80, 443]\n\nfor port in target_ports:\n    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n    s.settimeout(2)\n    result = s.connect_ex((target_host, port))\n    if result == 0:\n        print(\"Port {} is open\".format(port))\n    s.close()\n<\/code><\/pre>\n\n\n\n
This code creates a socket for each port in the target_ports list and attempts to connect to the target_host. If the connection is successful, the port is considered open.<\/p>\n\n\n\n
Using the nmap Library<\/h3>\n\n\n\n
The nmap library is a more advanced port scanning tool that provides additional functionality, such as OS detection and service identification. To use the nmap library, you can use the following code:<\/p>\n\n\n\n
import nmap\n\nnm = nmap.PortScanner()\n\ntarget_host = \"192.168.1.1\"\ntarget_ports = \"21,22,80,443\"\n\nnm.scan(hosts=target_host, arguments=\"-p \" + target_ports)\n\nfor host in nm.all_hosts():\n    print(\"Host : %s\" % host)\n    for port in nm[host]['tcp'].keys():\n        print(\"Port : %s\\tState : %s\" % (port, nm[host]['tcp'][port]['state']))\n<\/code><\/pre>\n\n\n\n
This code creates an instance of the nmap.PortScanner() class and uses the scan() method to perform a port scan on the target_host using the specified target_ports. The results are then printed to the console.<\/p>\n\n\n\n
Network Discovery<\/h2>\n\n\n\n
Network discovery is the process of identifying devices on a network. Python provides several libraries for implementing network discovery, including the scapy and netifaces libraries.<\/p>\n\n\n\n
Using the scapy Library<\/h3>\n\n\n\n
To perform network discovery using the scapy library, you can use the following code:<\/p>\n\n\n\n
from scapy.all import ARP, Ether, srp\n\ntarget_ip = \"192.168.1.0\/24\"\n\n# Create ARP request\narp = ARP(pdst=target_ip)\n\n# Create Ethernet frame\nether = Ether(dst=\"ff:ff:ff:ff:ff:ff\")\n\n# Combine Ethernet and ARP requests\npacket = ether\/arp\n\n# Send packet and capture response\nresult = srp(packet, timeout=3, verbose=0)[0]\n\n# Extract results\ndevices = []\nfor sent, received in result:\n    devices.append({'ip': received.psrc, 'mac': received.hwsrc})\n\n# Print results\nfor device in devices:\n    print(\"IP Address: {}\\tMAC Address: {}\".format(device['ip'], device['mac']))\n<\/code><\/pre>\n\n\n\n
This code creates an ARP request for the target_ip and sends it to the network using the srp() function. The response is then captured and parsed to extract the IP and MAC addresses of the devices on the network.<\/p>\n\n\n\n
Using the netifaces Library<\/h3>\n\n\n\n
The netifaces library is a simpler tool that can be used to retrieve information about the network interfaces on a machine. To use the netifaces library, you can use the following code:<\/p>\n\n\n\n
import net<\/code><\/pre>\n\n\n\n
Using the netifaces Library (continued)<\/h3>\n\n\n\n
import netifaces\n\n# Get network interfaces\ninterfaces = netifaces.interfaces()\n\n# Print information for each interface\nfor interface in interfaces:\n    iface = netifaces.ifaddresses(interface)\n    if netifaces.AF_INET in iface:\n        ip = iface[netifaces.AF_INET][0]['addr']\n        netmask = iface[netifaces.AF_INET][0]['netmask']\n        broadcast = iface[netifaces.AF_INET][0]['broadcast']\n        print(\"Interface: {}\\tIP Address: {}\\tNetmask: {}\\tBroadcast: {}\".format(interface, ip, netmask, broadcast))\n<\/code><\/pre>\n\n\n\n
This code retrieves a list of network interfaces on the machine using the interfaces() function and retrieves the IP address, netmask, and broadcast address for each interface using the ifaddresses() function.<\/p>\n\n\n\n
Conclusion<\/h2>\n\n\n\n
Network scanning is an important part of network security, allowing system administrators to identify potential vulnerabilities and attack vectors. In this article, we explored network scanning techniques using Python, including port scanning and network discovery. By using these techniques, you can better understand the devices and services on your network and take steps to secure them.<\/p>\n\n\n\n
References<\/h2>\n\n\n\n