#include <afxext.h>#include <winsock.h>// 編譯時需使用的庫#pragma comment(lib,"wsock32.lib")// select()成員定義#define ZERO (fd_set *)0// 變量定義int maxth, scanok, scannum;int portip, hoststart, hoststop, startport, endport; //定義了開始I和結束P地址，開始和結束端口long searchnum, searched;void usage(char *); // 定義顯示使用方法函數void playx(int); // 定義狀態提示函數void setip2(char *); // 定義設置IP函數void customport(char *, char *, char *); // 定義自定義掃描端口函數void portscannow(int); // 定義端口掃描掃描int main(int argc, char *argv[]){WSADATA wsadata;// 清屏system("cls.exe");// 顯示版本信息printf("/r/n============== 命令行端口掃描器 PortScanner V1.0 ==============");// 檢查輸入if ((argc < 3) || (argc > 4)){// 顯示幫助提示usage(argv[0]);return -1;}// 檢測是否為port掃描if(!(stricmp(strlwr(argv[1]), "-p") == 0)){usage(argv[0]);return -1;}// 程序初始化if (WSAStartup(MAKEWORD(1,1), &wsadata) != 0) //如果初始化錯誤{printf("/r/nWsatartup error");      //出錯信息return -1;}// 端口掃描參數轉換// 如果參數為三個if (argc == 3){// 直接設置IPsetip2(argv[2]);}// 如果參數為四個elseif (argc == 4){// 進入定制端口掃描處理customport(argv[0], argv[2], argv[3]);}// 參數過多顯示幫助else{usage(argv[0]);return -1;}// 掃描端口開始portscannow(argc);WSACleanup();return 0;}// 幫助提示函數void usage(char * prog){printf("Usage: %s <Option>", prog);printf("/r/n/n <Option>:");printf("/r/n -p [ Port|StartPort-EndPort ] < HostName|IP|StartIP-EndIP >");printf("/r/n/n Example: ");printf("/r/n %s -p 192.168.0.1", prog);printf("/r/n %s -p 192.168.0.1-192.168.0.254", prog);printf("/r/n %s -p 21-80 192.168.0.1", prog);printf("/r/n %s -p 21-80 192.168.0.1-192.168.0.254/r/n", prog);return;}// 進度提示void playx(int play = 0){// 進度條char *plays[12]={" | "," / "," - "," // "," | "," / "," - "," // "," | "," / "," - "," // ",};if (searchnum != 0){for (int i = 0 ; i <= 3; i ++){ printf(" =%s= %d%s Completed. /r", plays , searched * 100 / (searchnum + 1), "%"); Sleep(5);}}else{ printf(" =%s=/r", plays[play]); //顯示進度 Sleep(10);}}// 設置IPvoid setip2(char *cp){int host;struct hostent *testhost;char *startip = "", *endip = "";// 判斷是否為 192.168.0.1-192.168.0.254 形式的輸入if (strstr(cp, "-") && strlen(cp) > 15 && strlen(cp) < 32){// 提取出結束IPendip = strchr(cp, '-') + 1;// 提取出開始IPstrncpy(startip, cp, strlen(cp) - strlen(strchr(cp, '-')));// 給控制要掃描IP段的變量賦值hoststart = ntohl(inet_addr(startip));hoststop = ntohl(inet_addr(endip));}else{// 取得輸入的主機地址testhost = gethostbyname(startip);// 如果地址不存在if(!testhost){ WSACleanup( ); printf("/r/nCan't get ip of: %s", cp); exit(-1);}// 給控制要掃描IP段的變量賦值memcpy(&host, testhost->h_addr, 4);hoststop = hoststart = ntohl(host);}}// 測試線程是否已滿void TestThread(int thread = 200){for (;;){playx();// 測試線程是否已滿if (maxth > thread) Sleep(100);else break;}return;}// 等待線程結束函數void WaitThreadEnd(){// 延時Sleep(6000);// 顯示等待提示printf("/r   /r/n");printf(" Wait ( %d )Thread end.../r/n", maxth);for(;;){// 判斷所有線程是否已經結束if (maxth > 0){ // 延時等待線程序結束 Sleep(100); playx(); continue;}else break;}printf("/r/n");return;}// 定制端口掃描參數void customport(char *cp, char *cp2, char *cp3){int intport;char *checker;// 處理要掃描的端口// 掃描開始端口變量賦值startport = atoi(cp2);// 掃描結束端口變量賦值endport = atoi(cp2);// 判斷是否 21-80 形式if (strstr(cp2,"-")){intport = atoi(checker = strchr(cp2, '-') + 1);if (intport > 0 && intport < 65536) // 掃描結束端口變量賦值 endport = intport;}// 端口大小判斷if (startport < 0 || startport > 65536 || endport < 0 || endport > 65535){usage(cp);exit(-1);}// 處理ip地址setip2(cp3);}// 端口掃描函數UINT portscan(LPVOID port){int addr = portip; // 取得要掃描的地址int sock;struct fd_set mask;struct timeval timeout;struct sockaddr_in server;unsigned long flag = 1;// 創建一個socksock = socket(AF_INET, SOCK_STREAM, 0);// 創建sock失敗處理if (sock == INVALID_SOCKET){printf("/r/nSock Error:%s", WSAGetLastError());maxth --;return -1;}// 給sock成員賦值server.sin_family=AF_INET;server.sin_addr.s_addr = htonl(addr); // 要掃描的地址server.sin_port = htons(short(port)); // 要掃描的端口// 顯示進度playx();// 調用ioctlsocket()設置套接字為非阻塞模式if (ioctlsocket(sock, FIONBIO, &flag) != 0){// 設置失敗處理printf("/r/nSock Error:%s", WSAGetLastError());closesocket(sock);maxth --;return -1;}// 調用connect()連接遠程主機端口connect(sock, (struct sockaddr*)&server, sizeof(server));timeout.tv_sec = 18; // 超時限制為18秒timeout.tv_usec = 0;FD_ZERO(&mask); // 清空集合maskFD_SET(sock, &mask); // 將sock放入集合mask中// 用select() 處理掃描結果switch(select(sock + 1, ZERO, &mask, ZERO, &timeout)){case -1:{ printf("/r/nSelect() error"); maxth --; return -1;}// sock超時處理case 0:{ maxth --; closesocket(sock); return -1;}default:if(FD_ISSET(sock, &mask)){ // 禁止sock發送和接受數據 shutdown(sock, 0); // 設置輸出結果格式 printf(" [Found:] %s Port: %d open./r/n", inet_ntoa(server.sin_addr), ntohs(server.sin_port)); // 關閉sock closesocket(sock); scanok ++; maxth --; return 1;}}return 0;}// 掃描開始主函數void portscannow(int xp){int sport;char *timenow, timebuf[32];// 默認掃描的端口char *ports[32]={"21","22","23","25","53","79","80","110","111","113","123","135","139","143","443","512","513","514","515","540","1080","1433","1521","1524","3306","3389","5631","6000","6112","8000","8080","12345"http://這里你也可以自己要掃描的端口};// 顯示掃描開始的時間timenow = _strtime(timebuf);printf("/r/nPortScan Start Time: %s/r/n/n",timenow);// 計數器初始化.maxth = 0;scanok = 0;scannum = 0;searched = 0;// 計算要掃描的端口數量searchnum = hoststop - hoststart +1;if(xp == 3)searchnum = searchnum * 32;if(xp == 4)searchnum = searchnum * (endport - startport +1);// 端口掃描開始for (portip = hoststart; portip <= hoststop; portip ++, scannum ++){// *.*.*.0和*.*.*.255 地址處理if ((portip % 256) == 0 || (portip % 256) == 255){ if(xp == 3) searchnum = searchnum - 32; if(xp == 4) searchnum = searchnum - (endport - startport +1); scannum --; playx(); continue;}if(i > 11) i = 0;// 默認端口掃描// scan 192.168.0.1// scan 192.168.0.1-192.168.0.254if (xp == 3){ for (sport = 0; sport < 32; sport ++, maxth ++, searched ++) { // 測試當前線程是否大于180 TestThread(180); // 產生新的線程處理端口掃描 CWinThread * pthread = AfxBeginThread(portscan,LPVOID(atoi((char*)ports[sport]))); //延時 Sleep(120); }}// 自端口掃描// scan -p 21 192.168.0.1// scan -p 21-80 192.168.0.1-192.168.0.254if (xp == 4){ // 計算要掃描的端口 sport = endport - startport; if(sport > 500 ) { // 掃描自的端口 for(sport = startport; sport <= endport; sport ++, maxth ++, searched ++) {  TestThread(2000);  // 產生新的線程處理端口掃描  CWinThread * pthread = AfxBeginThread(portscan, LPVOID(sport));  // 延時  Sleep(10); } } else { // 掃描自的端口 for(sport = startport; sport <= endport; sport ++, maxth ++, searched ++) {  // 測試當前線程是否大于250  TestThread(250);  // 產生新的線程處理端口掃描  CWinThread * pthread = AfxBeginThread(portscan, LPVOID(sport));  // 延時  Sleep(100);  playx(); } }}}// 等待所有的線程結束WaitThreadEnd();// 顯示端口掃描結束時間timenow = _strtime(timebuf);printf("/r/nPortScan End Time: %s", timenow);printf("/r/nScan %d Hosts completed. Open %d Ports!/r/n", scannum, scanok);}

/*此函數實現判斷m_server的m_port端口是否可以連上，超時限制為nTimeOut秒*/ BOOL ConnectTest(char * m_server,int m_port) {     struct hostent* host = NULL;     struct sockaddr_in saddr;     unsigned int s = 0;     BOOL ret;     time_t start;     int error;     host = gethostbyname (m_server);     if (host==NULL)return FALSE;     saddr.sin_family = AF_INET;     saddr.sin_port = htons(m_port);     saddr.sin_addr = *((struct in_addr*)host->h_addr);     if( (s=socket(AF_INET, SOCK_STREAM, 0))<0){         return FALSE;     }     fcntl(s,F_SETFL, O_NONBLOCK);     if(connect(s,(struct sockaddr*)&saddr, sizeof(saddr)) == -1) {         if (errno == EINPROGRESS){// it is in the connect process             struct timeval tv;             fd_set writefds;             tv.tv_sec = m_nTimeOut;             tv.tv_usec = 0;             FD_ZERO(&writefds);             FD_SET(s, &writefds);             if(select(s+1,NULL,&writefds,NULL,&tv)>0){                 int len=sizeof(int);                 //下面的一句一定要，主要針對防火墻                 getsockopt(s, SOL_SOCKET, SO_ERROR, &error, &len);                 if(error==0) ret=TRUE;                 else ret=FALSE;             }else  ret=FALSE;//timeout or error happen         }else ret=FALSE;     }     else  ret=TRUE;     close(s);     return ret; }