anonymous121029034720384234234/py-network-scanner高度なネットワークペネトレーションテストツールキット。SSHの脆弱性評価、CVE-2018-15473の悪用、ステルス型ブルートフォース機能、fail2ban回避テクニックを備えています。認可されたペネトレーションテスト業務向けのプロフェッショナルグレードなセキュリティテストフレームワークです。
███╗ ██╗███████╗████████╗██╗ ██╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ███████╗██████╗
████╗ ██║██╔════╝╚══██╔══╝██║ ██║██╔═══██╗██╔══██╗██║ ██╔╝ ██╔══██╗██╔══██╗██╔════╝██╔══██╗
██╔██╗ ██║█████╗ ██║ ██║ █╗ ██║██║ ██║██████╔╝█████╔╝ ██████╔╝██████╔╝█████╗ ██║ ██║
██║╚██╗██║██╔══╝ ██║ ██║███╗██║██║ ██║██╔══██╗██╔═██╗ ██╔═══╝ ██╔══██╗██╔══╝ ██║ ██║
██║ ╚████║███████╗ ██║ ╚███╔███╔╝╚██████╔╝██║ ██║██║ ██╗ ██║ ██║ ██║███████╗██████╔╝
╚═╝ ╚═══╝╚══════╝ ╚═╝ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝╚══════╝╚═════╝
高度な回避機能を備えた、プロフェッショナルグレードのネットワーク偵察・SSH侵入テストフレームワーク
🚀 クイックスタート • 📖 ドキュメント • 🎯 エクスプロイト • 🛡️ 防御 • ⚖️ 法的免責事項
🔴 認可されたテスト専用
このツールは教育目的および認可されたペネトレーションテスト専用に設計されています。コンピュータシステムへの不正アクセスは違法であり、刑事告訴につながる可能性があります。
✅ 認可された用途:
❌ 不正な用途:
このツールを使用することにより、あなたは自己の行動に対して全責任を負い、適用されるすべての法律を遵守することに同意するものとします。
config.yamlによる柔軟なパラメータ管理# Ensure Python 3.6+ is installed
python3 --version
# Install required dependencies
pip3 install paramiko pyyaml colorama
# Clone the repository
git clone https://github.com/floriankostov/network_scanner.git
cd network_scanner
# Make executable (Unix/Linux/macOS)
chmod +x scanner.py
# Run the scanner
python3 scanner.py
# Build Docker image
docker build -t network-scanner .
# Run in container
docker run -it --network host network-scanner
python3 scanner.py
スキャナーは直感的なメニューシステムを提供します:
╔══════════════════════════════════════════════════════════════════╗
║ NETWORK SCANNER TOOLKIT ║
║ Professional Penetration Testing ║
╠══════════════════════════════════════════════════════════════════╣
║ 1. 📡 Extended Port Scan - Comprehensive port discovery ║
║ 2. ⚡ Basic Port Scan - Quick essential port check ║
║ 3. 🔐 SSH Security Testing - Advanced SSH vulnerability scan ║
║ 4. 🎯 Custom Target Scan - Manual IP/range specification ║
║ 5. ❌ Exit - Quit the application ║
╚══════════════════════════════════════════════════════════════════╝
# Automatic network detection
[+] Network: 192.168.1.0/24 (254 hosts)
[+] Gateway: 192.168.1.1
[+] Local IP: 192.168.1.100
# Custom network specification
python3 scanner.py --network 10.0.0.0/16
# Standard enumeration
[EXPLOIT] CVE-2018-15473 Username Enumeration
[+] Target: 192.168.1.50:22 (OpenSSH 7.4)
[+] Testing 100 common usernames...
[✓] Valid users found: admin, user, test
# Stealth enumeration with evasion
[STEALTH] Enabling anti-detection measures
[+] Random delays: 0.5-2.0 seconds
[+] Connection variation: randomized
[✓] Valid users found: admin (confirmed)
# Smart brute force
[EXPLOIT] Smart SSH Brute Force
[+] Target: 192.168.1.50:22
[+] Valid users: admin, user
[+] Wordlist: 500 common passwords
[✓] Credentials found: admin:password123
# Stealth brute force with fail2ban evasion
[STEALTH] Advanced evasion enabled
[+] Adaptive delays: 3-8 seconds
[+] Connection resets: every 5 attempts
[+] IP rotation: enabled
[!] Intrusion detection bypass: active
config.yaml）# Network scanning settings
network:
ping_timeout: 1.0
port_timeout: 3.0
thread_count: 50
max_hosts: 254
# SSH exploitation settings
ssh:
timeout: 10.0
retry_count: 3
stealth_mode: true
delay_min: 0.5
delay_max: 2.0
# Exploitation parameters
exploits:
user_enumeration:
max_users: 100
timing_threshold: 0.05
brute_force:
max_attempts: 50
wordlist_size: 500
fail2ban_detection: true
port_lists:
basic: [22, 80, 443, 8080]
extended: [21, 22, 23, 25, 53, 80, 110, 143, 443, 993, 995, 8080]
comprehensive: [1-1000, 3389, 5432, 5900, 8080-8090]
# Disable root login
echo "PermitRootLogin no" >> /etc/ssh/sshd_config
# Require key-based authentication
echo "PasswordAuthentication no" >> /etc/ssh/sshd_config
echo "PubkeyAuthentication yes" >> /etc/ssh/sshd_config
# Change default port
echo "Port 2222" >> /etc/ssh/sshd_config
# Restart SSH service
systemctl restart sshd
# Username enumeration attempts
grep "Invalid user" /var/log/auth.log
# Brute force detection
grep "Failed password" /var/log/auth.log | head -10
# Connection frequency analysis
awk '{print $1, $2, $3, $11}' /var/log/auth.log | grep "sshd" | sort | uniq -c
[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
bantime = 3600
findtime = 600