mirror of
https://github.com/nmap/nmap.git
synced 2025-12-07 05:01:29 +00:00
408 lines
19 KiB
Python
408 lines
19 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
# ***********************IMPORTANT NMAP LICENSE TERMS************************
|
|
# * *
|
|
# * The Nmap Security Scanner is (C) 1996-2016 Insecure.Com LLC ("The Nmap *
|
|
# * Project"). Nmap is also a registered trademark of the Nmap Project. *
|
|
# * This program is free software; you may redistribute and/or modify it *
|
|
# * under the terms of the GNU General Public License as published by the *
|
|
# * Free Software Foundation; Version 2 ("GPL"), BUT ONLY WITH ALL OF THE *
|
|
# * CLARIFICATIONS AND EXCEPTIONS DESCRIBED HEREIN. This guarantees your *
|
|
# * right to use, modify, and redistribute this software under certain *
|
|
# * conditions. If you wish to embed Nmap technology into proprietary *
|
|
# * software, we sell alternative licenses (contact sales@nmap.com). *
|
|
# * Dozens of software vendors already license Nmap technology such as *
|
|
# * host discovery, port scanning, OS detection, version detection, and *
|
|
# * the Nmap Scripting Engine. *
|
|
# * *
|
|
# * Note that the GPL places important restrictions on "derivative works", *
|
|
# * yet it does not provide a detailed definition of that term. To avoid *
|
|
# * misunderstandings, we interpret that term as broadly as copyright law *
|
|
# * allows. For example, we consider an application to constitute a *
|
|
# * derivative work for the purpose of this license if it does any of the *
|
|
# * following with any software or content covered by this license *
|
|
# * ("Covered Software"): *
|
|
# * *
|
|
# * o Integrates source code from Covered Software. *
|
|
# * *
|
|
# * o Reads or includes copyrighted data files, such as Nmap's nmap-os-db *
|
|
# * or nmap-service-probes. *
|
|
# * *
|
|
# * o Is designed specifically to execute Covered Software and parse the *
|
|
# * results (as opposed to typical shell or execution-menu apps, which will *
|
|
# * execute anything you tell them to). *
|
|
# * *
|
|
# * o Includes Covered Software in a proprietary executable installer. The *
|
|
# * installers produced by InstallShield are an example of this. Including *
|
|
# * Nmap with other software in compressed or archival form does not *
|
|
# * trigger this provision, provided appropriate open source decompression *
|
|
# * or de-archiving software is widely available for no charge. For the *
|
|
# * purposes of this license, an installer is considered to include Covered *
|
|
# * Software even if it actually retrieves a copy of Covered Software from *
|
|
# * another source during runtime (such as by downloading it from the *
|
|
# * Internet). *
|
|
# * *
|
|
# * o Links (statically or dynamically) to a library which does any of the *
|
|
# * above. *
|
|
# * *
|
|
# * o Executes a helper program, module, or script to do any of the above. *
|
|
# * *
|
|
# * This list is not exclusive, but is meant to clarify our interpretation *
|
|
# * of derived works with some common examples. Other people may interpret *
|
|
# * the plain GPL differently, so we consider this a special exception to *
|
|
# * the GPL that we apply to Covered Software. Works which meet any of *
|
|
# * these conditions must conform to all of the terms of this license, *
|
|
# * particularly including the GPL Section 3 requirements of providing *
|
|
# * source code and allowing free redistribution of the work as a whole. *
|
|
# * *
|
|
# * As another special exception to the GPL terms, the Nmap Project grants *
|
|
# * permission to link the code of this program with any version of the *
|
|
# * OpenSSL library which is distributed under a license identical to that *
|
|
# * listed in the included docs/licenses/OpenSSL.txt file, and distribute *
|
|
# * linked combinations including the two. *
|
|
# * *
|
|
# * The Nmap Project has permission to redistribute Npcap, a packet *
|
|
# * capturing driver and library for the Microsoft Windows platform. *
|
|
# * Npcap is a separate work with it's own license rather than this Nmap *
|
|
# * license. Since the Npcap license does not permit redistribution *
|
|
# * without special permission, our Nmap Windows binary packages which *
|
|
# * contain Npcap may not be redistributed without special permission. *
|
|
# * *
|
|
# * Any redistribution of Covered Software, including any derived works, *
|
|
# * must obey and carry forward all of the terms of this license, including *
|
|
# * obeying all GPL rules and restrictions. For example, source code of *
|
|
# * the whole work must be provided and free redistribution must be *
|
|
# * allowed. All GPL references to "this License", are to be treated as *
|
|
# * including the terms and conditions of this license text as well. *
|
|
# * *
|
|
# * Because this license imposes special exceptions to the GPL, Covered *
|
|
# * Work may not be combined (even as part of a larger work) with plain GPL *
|
|
# * software. The terms, conditions, and exceptions of this license must *
|
|
# * be included as well. This license is incompatible with some other open *
|
|
# * source licenses as well. In some cases we can relicense portions of *
|
|
# * Nmap or grant special permissions to use it in other open source *
|
|
# * software. Please contact fyodor@nmap.org with any such requests. *
|
|
# * Similarly, we don't incorporate incompatible open source software into *
|
|
# * Covered Software without special permission from the copyright holders. *
|
|
# * *
|
|
# * If you have any questions about the licensing restrictions on using *
|
|
# * Nmap in other works, are happy to help. As mentioned above, we also *
|
|
# * offer alternative license to integrate Nmap into proprietary *
|
|
# * applications and appliances. These contracts have been sold to dozens *
|
|
# * of software vendors, and generally include a perpetual license as well *
|
|
# * as providing for priority support and updates. They also fund the *
|
|
# * continued development of Nmap. Please email sales@nmap.com for further *
|
|
# * information. *
|
|
# * *
|
|
# * If you have received a written license agreement or contract for *
|
|
# * Covered Software stating terms other than these, you may choose to use *
|
|
# * and redistribute Covered Software under those terms instead of these. *
|
|
# * *
|
|
# * Source is provided to this software because we believe users have a *
|
|
# * right to know exactly what a program is going to do before they run it. *
|
|
# * This also allows you to audit the software for security holes. *
|
|
# * *
|
|
# * Source code also allows you to port Nmap to new platforms, fix bugs, *
|
|
# * and add new features. You are highly encouraged to send your changes *
|
|
# * to the dev@nmap.org mailing list for possible incorporation into the *
|
|
# * main distribution. By sending these changes to Fyodor or one of the *
|
|
# * Insecure.Org development mailing lists, or checking them into the Nmap *
|
|
# * source code repository, it is understood (unless you specify *
|
|
# * otherwise) that you are offering the Nmap Project the unlimited, *
|
|
# * non-exclusive right to reuse, modify, and relicense the code. Nmap *
|
|
# * will always be available Open Source, but this is important because *
|
|
# * the inability to relicense code has caused devastating problems for *
|
|
# * other Free Software projects (such as KDE and NASM). We also *
|
|
# * occasionally relicense the code to third parties as discussed above. *
|
|
# * If you wish to specify special license conditions of your *
|
|
# * contributions, just say so when you send them. *
|
|
# * *
|
|
# * This program is distributed in the hope that it will be useful, but *
|
|
# * WITHOUT ANY WARRANTY; without even the implied warranty of *
|
|
# * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the Nmap *
|
|
# * license file for more details (it's in a COPYING file included with *
|
|
# * Nmap, and also available from https://svn.nmap.org/nmap/COPYING) *
|
|
# * *
|
|
# ***************************************************************************/
|
|
|
|
import imp
|
|
import os
|
|
import signal
|
|
import sys
|
|
import ConfigParser
|
|
import shutil
|
|
|
|
# Cause an exception if PyGTK can't open a display. Normally this just
|
|
# produces a warning, but the lack of a display eventually causes a
|
|
# segmentation fault. See http://live.gnome.org/PyGTK/WhatsNew210.
|
|
# 'append = "True"' is to work around an error when using PyGTK with
|
|
# Python 2.7 that otherwise causes an assertion failure. See
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=620216#c10.
|
|
import warnings
|
|
warnings.filterwarnings("error", module="gtk", append="True")
|
|
try:
|
|
import gtk
|
|
except Exception:
|
|
# On Mac OS X 10.5, X11 is supposed to be automatically launched on demand.
|
|
# It works by setting the DISPLAY environment variable to something like
|
|
# "/tmp/launch-XXXXXX/:0" and intercepting traffic on that socket; see
|
|
# http://homepage.mac.com/sao1/X11/#four. However this breaks in a strange
|
|
# way if DISPLAY is set in one of the shell startup files like .profile.
|
|
# Those files only have an effect on the shell, not the graphical
|
|
# environment, so X11 starts up as expected, but in doing so it reads the
|
|
# startup scripts, and for some reason the first connection (the one that
|
|
# caused the launch) is rejected. But somehow subsequent connections work
|
|
# fine! So if the import fails, try one more time.
|
|
import gtk
|
|
warnings.resetwarnings()
|
|
|
|
from zenmapGUI.higwidgets.higdialogs import HIGAlertDialog
|
|
|
|
import zenmapCore.UmitConf
|
|
import zenmapCore.Paths
|
|
from zenmapCore.UmitConf import is_maemo
|
|
from zenmapCore.UmitLogging import log
|
|
from zenmapCore.UmitOptionParser import option_parser
|
|
from zenmapCore.Name import APP_NAME, APP_DISPLAY_NAME, NMAP_DISPLAY_NAME
|
|
from zenmapCore.UmitConf import SearchConfig
|
|
import zenmapCore.I18N
|
|
from zenmapCore.Paths import Path
|
|
from zenmapCore.Name import APP_DISPLAY_NAME
|
|
|
|
from zenmapGUI.higwidgets.higdialogs import HIGAlertDialog
|
|
|
|
# A global list of open scan windows. When the last one is destroyed, we call
|
|
# gtk.main_quit.
|
|
open_windows = []
|
|
|
|
|
|
def _destroy_callback(window):
|
|
open_windows.remove(window)
|
|
if len(open_windows) == 0:
|
|
gtk.main_quit()
|
|
try:
|
|
from zenmapCore.UmitDB import UmitDB
|
|
except ImportError, e:
|
|
log.debug(">>> Not cleaning up database: %s." % str(e))
|
|
else:
|
|
# Cleaning up data base
|
|
UmitDB().cleanup(SearchConfig().converted_save_time)
|
|
|
|
|
|
def new_window():
|
|
from zenmapGUI.MainWindow import ScanWindow
|
|
w = ScanWindow()
|
|
w.connect("destroy", _destroy_callback)
|
|
if is_maemo():
|
|
import hildon
|
|
hildon_app = hildon.Program()
|
|
hildon_app.add_window(w)
|
|
open_windows.append(w)
|
|
return w
|
|
|
|
|
|
# Script found at
|
|
# http://www.py2exe.org/index.cgi/HowToDetermineIfRunningFromExe
|
|
def main_is_frozen():
|
|
return (hasattr(sys, "frozen") # new py2exe
|
|
or hasattr(sys, "importers") # old py2exe
|
|
or imp.is_frozen("__main__")) # tools/freeze
|
|
|
|
|
|
def is_root():
|
|
if 'NMAP_PRIVILEGED' in os.environ:
|
|
return True
|
|
elif 'NMAP_UNPRIVILEGED' in os.environ:
|
|
return False
|
|
else:
|
|
return sys.platform == "win32" or os.getuid() == 0 or is_maemo()
|
|
|
|
|
|
def install_excepthook():
|
|
# This will catch exceptions and send them to bugzilla
|
|
def excepthook(type, value, tb):
|
|
import traceback
|
|
|
|
traceback.print_exception(type, value, tb)
|
|
|
|
# Cause an exception if PyGTK can't open a display. Normally this just
|
|
# produces a warning, but the lack of a display eventually causes a
|
|
# segmentation fault. See http://live.gnome.org/PyGTK/WhatsNew210.
|
|
import warnings
|
|
warnings.filterwarnings("error", module="gtk")
|
|
import gtk
|
|
warnings.resetwarnings()
|
|
|
|
gtk.gdk.threads_enter()
|
|
|
|
from zenmapGUI.higwidgets.higdialogs import HIGAlertDialog
|
|
from zenmapGUI.CrashReport import CrashReport
|
|
if type == ImportError:
|
|
d = HIGAlertDialog(type=gtk.MESSAGE_ERROR,
|
|
message_format=_("Import error"),
|
|
secondary_text=_("""A required module was not found.
|
|
|
|
""" + unicode(value)))
|
|
d.run()
|
|
d.destroy()
|
|
else:
|
|
c = CrashReport(type, value, tb)
|
|
c.show_all()
|
|
gtk.main()
|
|
|
|
gtk.gdk.threads_leave()
|
|
|
|
gtk.main_quit()
|
|
|
|
sys.excepthook = excepthook
|
|
|
|
|
|
def safe_shutdown(signum, stack):
|
|
"""Kills any active scans/tabs and shuts down the application."""
|
|
log.debug("\n\n%s\nSAFE SHUTDOWN!\n%s\n" % ("#" * 30, "#" * 30))
|
|
log.debug("SIGNUM: %s" % signum)
|
|
|
|
for window in open_windows:
|
|
window.scan_interface.kill_all_scans()
|
|
|
|
sys.exit(signum)
|
|
|
|
|
|
def run():
|
|
if os.name == "posix":
|
|
signal.signal(signal.SIGHUP, safe_shutdown)
|
|
signal.signal(signal.SIGTERM, safe_shutdown)
|
|
signal.signal(signal.SIGINT, safe_shutdown)
|
|
|
|
DEVELOPMENT = os.environ.get(APP_NAME.upper() + "_DEVELOPMENT", False)
|
|
if not DEVELOPMENT:
|
|
install_excepthook()
|
|
|
|
zenmapCore.I18N.install_gettext(Path.locale_dir)
|
|
|
|
try:
|
|
# Create the ~/.zenmap directory by copying from the system-wide
|
|
# template directory.
|
|
zenmapCore.Paths.create_user_config_dir(
|
|
Path.user_config_dir, Path.config_dir)
|
|
except (IOError, OSError), e:
|
|
error_dialog = HIGAlertDialog(
|
|
message_format=_(
|
|
"Error creating the per-user configuration directory"),
|
|
secondary_text=_("""\
|
|
There was an error creating the directory %s or one of the files in it. \
|
|
The directory is created by copying the contents of %s. \
|
|
The specific error was
|
|
|
|
%s
|
|
|
|
%s needs to create this directory to store information such as the list of \
|
|
scan profiles. Check for access to the directory and try again.""") % (
|
|
repr(Path.user_config_dir), repr(Path.config_dir),
|
|
repr(str(e)), APP_DISPLAY_NAME
|
|
)
|
|
)
|
|
error_dialog.run()
|
|
error_dialog.destroy()
|
|
sys.exit(1)
|
|
|
|
try:
|
|
# Read the ~/.zenmap/zenmap.conf configuration file.
|
|
zenmapCore.UmitConf.config_parser.read(Path.user_config_file)
|
|
except ConfigParser.ParsingError, e:
|
|
# ParsingError can leave some values as lists instead of strings. Just
|
|
# blow it all away if we have this problem.
|
|
zenmapCore.UmitConf.config_parser = zenmapCore.UmitConf.config_parser.__class__()
|
|
error_dialog = HIGAlertDialog(
|
|
message_format=_("Error parsing the configuration file"),
|
|
secondary_text=_("""\
|
|
There was an error parsing the configuration file %s. \
|
|
The specific error was
|
|
|
|
%s
|
|
|
|
%s can continue without this file but any information in it will be ignored \
|
|
until it is repaired.""") % (Path.user_config_file, str(e), APP_DISPLAY_NAME)
|
|
)
|
|
error_dialog.run()
|
|
error_dialog.destroy()
|
|
global_config_path = os.path.join(Path.config_dir, APP_NAME + '.conf')
|
|
repair_dialog = HIGAlertDialog(
|
|
type=gtk.MESSAGE_QUESTION,
|
|
message_format=_("Restore default configuration?"),
|
|
secondary_text=_("""\
|
|
To avoid further errors parsing the configuration file %s, \
|
|
you can copy the default configuration from %s.
|
|
|
|
Do this now? \
|
|
""") % (Path.user_config_file, global_config_path),
|
|
)
|
|
repair_dialog.add_button(gtk.STOCK_CANCEL, gtk.RESPONSE_CANCEL)
|
|
repair_dialog.set_default_response(gtk.RESPONSE_CANCEL)
|
|
if repair_dialog.run() == gtk.RESPONSE_OK:
|
|
shutil.copyfile(global_config_path, Path.user_config_file)
|
|
log.debug(">>> Copy %s to %s." % (global_config_path, Path.user_config_file))
|
|
repair_dialog.destroy()
|
|
|
|
# Display a "you're not root" warning if appropriate.
|
|
if not is_root():
|
|
non_root = NonRootWarning()
|
|
non_root.run()
|
|
non_root.destroy()
|
|
|
|
# Load files given as command-line arguments.
|
|
filenames = option_parser.get_open_results()
|
|
if len(filenames) == 0:
|
|
# Open up a blank window.
|
|
window = new_window()
|
|
window.show_all()
|
|
else:
|
|
for filename in filenames:
|
|
window = new_window()
|
|
if os.path.isdir(filename):
|
|
window._load_directory(window.scan_interface, filename)
|
|
else:
|
|
window._load(window.scan_interface, filename)
|
|
window.show_all()
|
|
|
|
nmap = option_parser.get_nmap()
|
|
target = option_parser.get_target()
|
|
profile = option_parser.get_profile()
|
|
|
|
if nmap:
|
|
# Start running a scan if given by the -n option.
|
|
page = window.get_empty_interface()
|
|
page.command_toolbar.command = " ".join(nmap)
|
|
page.start_scan_cb()
|
|
elif target or profile:
|
|
# Set up target and profile according to the -t and -p options.
|
|
page = window.get_empty_interface()
|
|
if target:
|
|
page.toolbar.selected_target = target
|
|
if profile:
|
|
page.toolbar.selected_profile = profile
|
|
if target and profile:
|
|
page.start_scan_cb()
|
|
|
|
if main_is_frozen():
|
|
# This is needed by py2exe
|
|
gtk.gdk.threads_init()
|
|
gtk.gdk.threads_enter()
|
|
|
|
gtk.main()
|
|
|
|
if main_is_frozen():
|
|
gtk.gdk.threads_leave()
|
|
|
|
|
|
class NonRootWarning (HIGAlertDialog):
|
|
def __init__(self):
|
|
warning_text = _('''You are trying to run %s with a non-root user!
|
|
|
|
Some %s options need root privileges to work.''') % (
|
|
APP_DISPLAY_NAME, NMAP_DISPLAY_NAME)
|
|
|
|
HIGAlertDialog.__init__(self, message_format=_('Non-root user'),
|
|
secondary_text=warning_text)
|