//#include <stdafx.h>
#include <afxext.h>
#include <winsock.h>
//#include <winsock2.h>
// 編譯時需使用的庫
#pragma comment(lib,"wsock32.lib")
#pragma comment(lib,"imm32.lib")
// select()成員定義
#define ZERO (fd_set *)0

// 變量定義
int maxth, scanok, scannum,i;
int portip, hoststart, hoststop, startport, endport;
long searchnum, searched;

void usage(char *); // 定義顯示使用方法函數(shù)
void playx(int); // 定義狀態(tài)提示函數(shù)
void setip2(char *); // 定義設置IP函數(shù)
void customport(char *, char *, char *); // 定義自定義掃描端口函數(shù)
void portscannow(int); // 定義端口掃描掃描


// 主程序
int main(int argc, char *argv[])
{
WSADATA wsadata;

// 清屏
system("cls.exe");

// 顯示版本信息
printf("\r\n==================== HUC Command Line PortScanner V0.2 ====================");
printf("\r\n=============== By Lion, Welcome to http://www.cnhonker.net ===============\r\n\n");

// 檢查輸入
if ((argc < 3) ||(argc > 4))
{
// 顯示幫助提示
usage(argv[0]);
return -1;
}

// 檢測是否為port掃描
if(!(stricmp(strlwr(argv[1]), "-p") == 0))
{
usage(argv[0]);
return -1;
}

// 程序初始化
if (WSAStartup(MAKEWORD(1,1), &wsadata) != 0)
{
printf("\r\nWsatartup error");
return -1;
}

// 端口掃描參數(shù)轉(zhuǎn)換
// 如果參數(shù)為三個
if (argc == 3)
{
// 直接設置IP
setip2(argv[2]);
}
// 如果參數(shù)為四個
else
if (argc == 4)
{
// 進入定制端口掃描處理
customport(argv[0], argv[2], argv[3]);
}
// 參數(shù)過多顯示幫助
else
{
usage(argv[0]);
return -1;
}

// 掃描端口開始
portscannow(argc);

WSACleanup();
return 0;
}

// 幫助提示函數(shù)
void usage(char * prog)
{
printf("Usage: %s <Option>", prog);
printf("\r\n\n <Option>:");
printf("\r\n -p [ Port│StartPort-EndPort ] < HostName│IP│StartIP-EndIP >");
printf("\r\n\n Example: ");
printf("\r\n %s -p 192.168.0.1", prog);
printf("\r\n %s -p 192.168.0.1-192.168.0.254", prog);
printf("\r\n %s -p 21-80 192.168.0.1", prog);
printf("\r\n %s -p 21-80 192.168.0.1-192.168.0.254\r\n", prog);
return;
}

// 進度提示
void playx(int play = 0)
{
// 進度條
char *plays[12]=
{
" │ ",
" / ",
" - ",
" \\ ",
" │ ",
" / ",
" - ",
" \\ ",
" │ ",
" / ",
" - ",
" \\ ",
};

if (searchnum != 0)
{
for (int i = 0 ; i <= 3; i ++)
{
printf(" =%s= %d%s Completed. \r", plays , searched * 100 / (searchnum + 1), "%");
Sleep(5);
}
}
else
{
printf(" =%s=\r", plays[play]);
Sleep(10);
}
}

// 設置IP
void setip2(char *cp)
{
int host;
struct hostent *testhost;
char *startip = "", *endip = "";

// 判斷是否為 192.168.0.1-192.168.0.254 形式的輸入
if (strstr(cp, "-") && strlen(cp) > 15 && strlen(cp) < 32)
{
// 提取出結束IP
endip = strchr(cp, '-') + 1;
// 提取出開始IP
strncpy(startip, cp, strlen(cp) - strlen(strchr(cp, '-')));

// 給控制要掃描IP段的變量賦值
hoststart = ntohl(inet_addr(startip));
hoststop = ntohl(inet_addr(endip));
}
else
{
// 取得輸入的主機地址
testhost = gethostbyname(startip);

// 如果地址不存在
if(!testhost)
{
WSACleanup( );
printf("\r\nCan't get ip of: %s", cp);
exit(-1);
}
// 給控制要掃描IP段的變量賦值
memcpy(&host, testhost->h_addr, 4);
hoststop = hoststart = ntohl(host);
}
}

// 測試線程是否已滿
void TestThread(int thread = 200)
{
while(1)
{
playx();

// 測試線程是否已滿
if (maxth > thread)
Sleep(100);
else break;
}
return;
}

// 等待線程結束函數(shù)
void WaitThreadEnd()
{
// 延時
Sleep(6000);

// 顯示等待提示
printf("\r \r\n");
printf(" Wait ( %d )Thread end...\r\n", maxth);

while(1)
{
// 判斷所有線程是否已經(jīng)結束
if (maxth > 0)
{
// 延時等待線程序結束
Sleep(100);
playx();
continue;
}
else break;
}
printf("\r\n");
return;
}

// 定制端口掃描參數(shù)定義
void customport(char *cp, char *cp2, char *cp3)
{
int intport;
char *checker;

// 處理要掃描的端口
// 掃描開始端口變量賦值
startport = atoi(cp2);
// 掃描結束端口變量賦值
endport = atoi(cp2);

// 判斷是否 21-80 形式
if (strstr(cp2,"-"))
{
intport = atoi(checker = strchr(cp2, '-') + 1);
if (intport > 0 && intport < 65536)
// 掃描結束端口變量賦值
endport = intport;
}

// 端口大小判斷
if (startport < 0 || startport > 65536 || endport < 0 || endport > 65535)
{
usage(cp);
exit(-1);
}
// 處理ip地址
setip2(cp3);
}

// 端口掃描函數(shù)
UINT portscan(LPVOID port)
{
int addr = portip; // 取得要掃描的地址
int sock;
struct fd_set mask;
struct timeval timeout;
struct sockaddr_in server;
unsigned long flag = 1;

// 創(chuàng)建一個sock
sock = socket(AF_INET, SOCK_STREAM, 0);

// 創(chuàng)建sock失敗處理
if (sock == INVALID_SOCKET)
{
printf("\r\nSock Error:%s", WSAGetLastError());
maxth --;
return -1;
}

// 給sock成員賦值
server.sin_family=AF_INET;
server.sin_addr.s_addr = htonl(addr); // 要掃描的地址
server.sin_port = htons(short(port)); // 要掃描的端口

// 顯示進度
playx();

// 調(diào)用ioctlsocket()設置套接字為非阻塞模式
if (ioctlsocket(sock, FIONBIO, &flag) != 0)
{
// 設置失敗處理
printf("\r\nSock Error:%s", WSAGetLastError());
closesocket(sock);
maxth --;
return -1;
}

// 調(diào)用connect()連接遠程主機端口
connect(sock, (struct sockaddr*)&server, sizeof(server));

timeout.tv_sec = 18; // 超時限制為18秒
timeout.tv_usec = 0;
FD_ZERO(&mask); // 清空集合mask
FD_SET(sock, &mask); // 將sock放入集合mask中

// 用select() 處理掃描結果
switch(select(sock + 1, ZERO, &mask, ZERO, &timeout))
{
case -1:
{
printf("\r\nSelect() error");
maxth --;
return -1;
}

// sock超時處理
case 0:
{
maxth --;
closesocket(sock);
return -1;
}

default:
if(FD_ISSET(sock, &mask))
{
// 禁止sock發(fā)送和接受數(shù)據(jù)
shutdown(sock, 0);

// 設置輸出結果格式
printf(" [Found:] %s Port: %d open.\r\n", inet_ntoa(server.sin_addr), ntohs(server.sin_port));

// 關閉sock
closesocket(sock);
scanok ++;
maxth --;
return 1;
}
}
return 0;
}

// 掃描開始主函數(shù)
void portscannow(int xp)
{
int sport;
char *timenow, timebuf[32];

// 定義默認掃描的端口
char *ports[32]={
"21",
"22",
"23",
"25",
"53",
"79",
"80",
"110",
"111",
"113",
"123",
"135",
"139",
"143",
"443",
"512",
"513",
"514",
"515",
"540",
"1080",
"1433",
"1521",
"1524",
"3306",
"3389",
"5631",
"6000",
"6112",
"8000",
"8080",
"12345"
};

// 顯示掃描開始的時間
timenow = _strtime(timebuf);
printf("\r\nPortScan Start Time: %s\r\n\n",timenow);

// 計數(shù)器初始化.
maxth = 0;
scanok = 0;
scannum = 0;
searched = 0;

// 計算要掃描的端口數(shù)量
searchnum = hoststop - hoststart +1;
if(xp == 3)
searchnum = searchnum * 32;
if(xp == 4)
searchnum = searchnum * (endport - startport +1);

// 端口掃描開始
for (portip = hoststart; portip <= hoststop; portip ++, scannum ++)
{
// *.*.*.0和*.*.*.255 地址處理
if ((portip % 256) == 0 || (portip % 256) == 255)
{
if(xp == 3)
searchnum = searchnum - 32;
if(xp == 4)
searchnum = searchnum - (endport - startport +1);
scannum --;
playx();
continue;
}

if(i > 11) i = 0;
// 默認端口掃描
// scan 192.168.0.1
// scan 192.168.0.1-192.168.0.254
if (xp == 3)
{
for (sport = 0; sport < 32; sport ++, maxth ++, searched ++)
{
// 測試當前線程是否大于180
TestThread(180);
// 產(chǎn)生新的線程處理端口掃描
CWinThread * pthread = AfxBeginThread(portscan,LPVOID(atoi((char*)ports[sport])));
//延時
Sleep(120);
}
}

// 自定義端口掃描
// scan -p 21 192.168.0.1
// scan -p 21-80 192.168.0.1-192.168.0.254
if (xp == 4)
{ // 計算要掃描的端口
sport = endport - startport;
if(sport > 500 )
{
// 掃描自定義的端口
for(sport = startport; sport <= endport; sport ++, maxth ++, searched ++)
{
TestThread(2000);
// 產(chǎn)生新的線程處理端口掃描
CWinThread * pthread = AfxBeginThread(portscan, LPVOID(sport));
// 延時
Sleep(10);
}
}
else
{
// 掃描自定義的端口
for(sport = startport; sport <= endport; sport ++, maxth ++, searched ++)
{
// 測試當前線程是否大于250
TestThread(250);
// 產(chǎn)生新的線程處理端口掃描
CWinThread * pthread = AfxBeginThread(portscan, LPVOID(sport));
// 延時
Sleep(100);
playx();
}
}
}
}

// 等待所有的線程結束
WaitThreadEnd();

// 顯示端口掃描結束時間
timenow = _strtime(timebuf);
printf("\r\nPortScan End Time: %s", timenow);
printf("\r\nScan %d Hosts completed. Open %d Ports!\r\n", scannum, scanok);
}