1-vulnScanner.py

#!/usr/bin/python
# -*- coding: utf-8 -*-
import socket //importing socket module
import os     //importing operating system module
import sys    //importing sys module


def retBanner(ip, port): //function to retrive banner
    try:                 // try xy and do z if exception occurs
        socket.setdefaulttimeout(2) //setting default time for new sockets
        s = socket.socket() //creating new variable s from class socket
        s.connect((ip, port)) //network connection to socket
        banner = s.recv(1024) //receiving information from socket
        return banner  //printing the 1024 bytes on socket
    except:  //in case an exception occurs
        return


def checkVulns(banner, filename):

    f = open(filename, 'r') //open file in read only mode
    for line in f.readlines(): //iterate through each line in the file
        if line.strip('\n') in banner: //compare it against our banner
            print '[+] Server is vulnerable: ' +
                banner.strip('\n')
// print if there is a match

def main():

    if len(sys.argv) == 2: //if there are two arguments
        filename = sys.argv[1] //the first argument is the file name
        if not os.path.isfile(filename): //print error, otherwise ^
            print '[-] ' + filename +\
                ' does not exist.'
            exit(0)

        if not os.access(filename, os.R_OK): //print error if no read permissions to file
            print '[-] ' + filename +\
                ' access denied.'
            exit(0)
    else:
        print '[-] Usage: ' + str(sys.argv[0]) +\
            ' <vuln filename>'
        exit(0)

    portList = [21,22,25,80,110,443] //array containing list of ports
    for x in range(147, 150): //range of ip address'
        ip = '192.168.95.' + str(x) //goes through the various IP above
         for port in portList: //goes through the various poarts
            banner = retBanner(ip, port) //checking sockets connected to various ip&port combinations
            if banner: //print banner when you find one
                print '[+] ' + ip + ' : ' + banner
                checkVulns(banner, filename) //compare the banner with file function


if __name__ == '__main__':
    main()