????Masscan???????????????????????????????????????黥??????
????masscan?????????????nmap(?????????????)???????????????scanrand?? unicornscan?? and ZMap?????????????????????????Щ???????????????????????Щ??????????????masscan????????????????????????????????Χ??
???????????
??????Debian/Ubuntu???У???????????￡?
????$ sudo apt-get install git gcc make libpcap-dev
????$ git clone https://github.com/robertdavidgraham/masscan
????$ cd masscan
????$ make
?????:???????????г?????masscan/bin??
?????????????????????????? make -j
????PF_RING
????????????ó?????????????????????????????10-Gbps??????????????PF_RING DNA( http://www.ntop.org/products/pf_ring/ )??????????????masscan???PF_RING?????????????????????????????????:
????libpfring.so (????? /usr/ lib/libpfring.so)
????pf_ring.ko (pf_ring????????????)
????ixgbe.ko (???? 10 -gbps????????)
????????????????libpcap.so
??????masscan????????dna0?????????л??PF_RING??
???????????
??????????????????????????????:
????$ make regress
????bin/masscan --regress
????selftest: success!
??????÷???
??????÷?????????nmap???????????η?Χ????????
????# masscan -p80??8080-8100 10.0.0.0/8
??????????????????1???:
????1?????10.x.x.x???????????1600??????
????2???????80??8000-8100??Χ?????
????3??????????????????????????????????
????????? –echo ???????????????????????????????? -c ???????????????????
????# masscan -p80??8000-8100 10.0.0.0/8 --echo > xxx.conf
????# masscan -c xxx.conf --rate 1000
????Banner???
????masscan???????????????????????????????TCP???????????????ó????Banner?????
????# masscan 10.0.0.0/8 -p80 --banners --source-ip x.x.x.x
?????????????????????10.x.x.x????80??????????????????banner?????–source-ip ??????IP?????ip?????????????Ч??IP?????
????????????????÷?????????masscan????????????????
????Linux??????????????
????# iptables -A INPUT -p tcp --dport 60000 -j DROP
????# masscan 10.0.0.0/8 -p80 --banners --source-port 60000
????MAC OS X??BSD????????????
????# sudo ipfw add 1 deny tcp from any to any 60000 in
????# masscan 10.0.0.0/8 -p80 --banners --source-port 60000
???????????????????????????????????????? –heartbleed??????????banner???????
??????????
???????????????????????????裬????????????
????# masscan 0.0.0.0/0 -p0-65535
?????????????????????????????????Щ?鷳?????????????衣??????????????????ú???????????????????????Щ???Ρ???????:
????# masscan 0.0.0.0/0 -p0-65535 --excludefile exclude.txt
??????????????????????????????У??????????????
????# masscan 0.0.0.0/0 -p0-65535 -oX scan.xml
????????????????????????????XML?????
????????????????????????????100??/????????????????????????????
????# masscan 0.0.0.0/0 -p0-65535 --max-rate 100000
?????????????????10???????????????
????????????Щ????????????????е??鷳?????????????????????????????ü?????????????????С?????????????????????:
????rate = 100000
????output-format = xxx
????output-status = all
????output-filename = xxx.xxx
????ports = 0-65535
????range = 0.0.0.0-255.255.255.255
????excludefile = exclude.txt
???????????? -c ?????????????????????????????????????????????
??????????
?????????5?????????
????XML ????? ???-oX <filename> ??????? –output-format xml ?? –output-filename <filename>???????
????binary masscan??????
????grepable nmap??? ??? -oG <filename> ???? –output-format grepable ?? –output-filename <filename>???????
????json ??? -oJ <filename> ???? –output-format json ?? –output-filename <filename>???????
????list ?????б????????????????????-oL <filename> ???? –output-format list ?? –output-filename <filename>???????