更新: 359 个文件 - 2026-03-16 23:30:01

04-server-security/scanning/tools/port-scanner.py

@@ -27,6 +27,14 @@ import time
 from concurrent.futures import ThreadPoolExecutor, as_completed
 from typing import List, Dict, Tuple, Optional
 import sys
+from pathlib import Path
+
+
+SCRIPTS_DIR = Path(__file__).resolve().parents[2] / "scripts"
+if str(SCRIPTS_DIR) not in sys.path:
+    sys.path.insert(0, str(SCRIPTS_DIR))
+
+from tool_contract import add_common_args, emit_report, ensure_authorized, make_report, write_evidence  # noqa: E402
 
 
 class Colors:
@@ -229,37 +237,54 @@ def main():
     parser.add_argument("-t", "--threads", type=int, default=100, help="线程数")
     parser.add_argument("--timeout", type=float, default=1.0, help="超时时间")
     parser.add_argument("-v", "--verbose", action="store_true", help="详细输出")
+    add_common_args(parser, include_network=False)
 
     args = parser.parse_args()
+    ensure_authorized(args, parser)
 
     scanner = PortScanner(threads=args.threads, timeout=args.timeout)
+    if args.format != "text":
+        scanner.print_result = lambda *_args, **_kwargs: None  # type: ignore[assignment]
 
     if args.top_ports:
         ports = scanner.top_ports[: args.top_ports]
     else:
         ports = scanner.parse_ports(args.ports)
 
-    print(f"\n{Colors.BOLD}{'=' * 60}{Colors.END}")
-    print(f"{Colors.BOLD}Port Scanner{Colors.END}")
-    print(f"{Colors.BOLD}{'=' * 60}{Colors.END}\n")
-
     scanner.print_result("INFO", f"目标: {args.host}")
     scanner.print_result("INFO", f"端口: {len(ports)} 个")
     scanner.print_result("INFO", f"线程: {args.threads}")
 
     results = scanner.scan_host(args.host, ports, args.verbose)
 
-    print(f"\n{Colors.BOLD}{'=' * 60}{Colors.END}")
-    if results:
-        scanner.print_result("SUCCESS", f"发现 {len(results)} 个开放端口:")
-        print(f"\n{'PORT':<10} {'SERVICE':<15} {'BANNER'}")
-        print("-" * 60)
-        for r in sorted(results, key=lambda x: x["port"]):
-            banner = r["banner"][:40] if r["banner"] else r["service"]
-            print(f"{r['port']:<10} {r['service']:<15} {banner}")
-    else:
-        scanner.print_result("INFO", "未发现开放端口")
-    print(f"{Colors.BOLD}{'=' * 60}{Colors.END}\n")
+    evidence_refs = []
+    ref = write_evidence(args, "port-scan-results.json", {"results": results, "ports": ports})
+    if ref:
+        evidence_refs.append(ref)
+    status = "verified" if results else "needs-review"
+    severity = "medium" if results else "info"
+    report = make_report(
+        tool="port-scanner",
+        mode="minimal-port-scan",
+        target=args.host,
+        status=status,
+        severity=severity,
+        payload_or_probe={"ports": ports, "open_ports": results},
+        request_summary={"threads": args.threads, "timeout": args.timeout},
+        evidence_refs=evidence_refs,
+        destructive_risk="low",
+        args=args,
+    )
+    text_lines = [
+        "=" * 60,
+        "Port Scanner",
+        "=" * 60,
+        f"Target: {args.host}",
+        f"Ports Checked: {len(ports)}",
+        f"Open Ports: {len(results)}",
+        f"Status: {status}",
+    ]
+    emit_report(args, report, text_lines)
 
 
 if __name__ == "__main__":