111 lines
3.4 KiB
Bash
Executable File
111 lines
3.4 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# 用法:
|
|
# ./scan-ip.sh # ICMP 扫描本网段在线 IP
|
|
# ./scan-ip.sh 22 # 扫描本网段中 22 端口开放的 IP
|
|
# ./scan-ip.sh 80,443,8080 # 扫描本网段中任一指定端口开放的 IP
|
|
# ./scan-ip.sh 22 10.0.0 # 指定网段前缀（不写则使用本机所在网段）
|
|
|
|
PORT_SPEC="$1"
|
|
PREFIX_ARG="$2"
|
|
TIMEOUT=1
|
|
|
|
if command -v ip &>/dev/null; then
|
|
LOCAL_IP=$(ip addr show | grep 'inet ' | grep -v '127.0.0.1' | awk '{print $2}' | cut -d/ -f1 | head -n 1)
|
|
elif command -v ifconfig &>/dev/null; then
|
|
LOCAL_IP=$(ifconfig | grep 'inet ' | grep -v '127.0.0.1' | awk '{print $2}' | head -n 1)
|
|
else
|
|
echo "错误: 找不到 ip 或 ifconfig 命令" && exit 1
|
|
fi
|
|
|
|
[ -z "$LOCAL_IP" ] && echo "错误: 未能检测到本地 IP" && exit 1
|
|
|
|
if [ -n "$PREFIX_ARG" ]; then
|
|
PREFIX="$PREFIX_ARG"
|
|
else
|
|
PREFIX="${LOCAL_IP%.*}"
|
|
fi
|
|
|
|
# 解析端口参数 -> PORTS 数组
|
|
PORTS=()
|
|
if [ -n "$PORT_SPEC" ]; then
|
|
if [[ "$PORT_SPEC" =~ ^[0-9]+$ ]]; then
|
|
PORTS=("$PORT_SPEC")
|
|
elif [[ "$PORT_SPEC" =~ ^[0-9]+-[0-9]+$ ]]; then
|
|
START_PORT=${PORT_SPEC%-*}
|
|
END_PORT=${PORT_SPEC#*-}
|
|
if [ "$START_PORT" -gt "$END_PORT" ]; then
|
|
echo "错误: 起始端口 ($START_PORT) 不能大于结束端口 ($END_PORT)" && exit 1
|
|
fi
|
|
for p in $(seq "$START_PORT" "$END_PORT"); do PORTS+=("$p"); done
|
|
elif [[ "$PORT_SPEC" =~ ^[0-9,]+$ ]]; then
|
|
IFS=',' read -ra PORTS <<<"$PORT_SPEC"
|
|
else
|
|
echo "错误: 无效的端口格式: $PORT_SPEC"
|
|
echo "支持: 单端口(22) / 列表(80,443) / 范围(8000-8100)"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
echo "本机 IP: $LOCAL_IP，扫描网段: $PREFIX.1-254"
|
|
if [ ${#PORTS[@]} -gt 0 ]; then
|
|
echo "扫描端口: ${PORTS[*]} (TCP，超时 ${TIMEOUT}s)"
|
|
else
|
|
echo "扫描模式: ICMP (在线检测)"
|
|
fi
|
|
echo "------------------------------------------------------"
|
|
|
|
# ---------- 模式一：ICMP 在线扫描（无端口参数） ----------
|
|
if [ ${#PORTS[@]} -eq 0 ]; then
|
|
# macOS: -W 单位毫秒，-S 绑定源 IP
|
|
# Linux: -W 单位秒， -I 绑定源 IP
|
|
if [ "$(uname -s)" = "Darwin" ]; then
|
|
for i in $(seq 1 254); do
|
|
ping -c 1 -W 1000 -S "$LOCAL_IP" "$PREFIX.$i" >/dev/null 2>&1 && echo "$PREFIX.$i 在线" &
|
|
done
|
|
else
|
|
for i in $(seq 1 254); do
|
|
ping -c 1 -W 1 -I "$LOCAL_IP" "$PREFIX.$i" >/dev/null 2>&1 && echo "$PREFIX.$i 在线" &
|
|
done
|
|
fi
|
|
wait
|
|
echo "------------------------------------------------------"
|
|
echo "扫描完成"
|
|
exit 0
|
|
fi
|
|
|
|
# ---------- 模式二：TCP 端口扫描 ----------
|
|
if ! command -v nc &>/dev/null; then
|
|
echo "错误: 找不到 nc (netcat)，请先安装："
|
|
echo " macOS: brew install netcat"
|
|
echo " Debian/Ubuntu: sudo apt-get install netcat-openbsd"
|
|
exit 1
|
|
fi
|
|
|
|
# nc 在不同实现里 -z/-w 行为基本一致；用 -G 在 macOS 上控制连接超时更准
|
|
NC_OPTS=(-z -w "$TIMEOUT")
|
|
if [ "$(uname -s)" = "Darwin" ]; then
|
|
NC_OPTS+=(-G "$TIMEOUT")
|
|
fi
|
|
|
|
check_host() {
|
|
local ip="$1"
|
|
local hit=()
|
|
for port in "${PORTS[@]}"; do
|
|
if nc "${NC_OPTS[@]}" "$ip" "$port" >/dev/null 2>&1; then
|
|
hit+=("$port")
|
|
fi
|
|
done
|
|
if [ ${#hit[@]} -gt 0 ]; then
|
|
echo "$ip 开放: ${hit[*]}"
|
|
fi
|
|
}
|
|
|
|
for i in $(seq 1 254); do
|
|
check_host "$PREFIX.$i" &
|
|
done
|
|
wait
|
|
|
|
echo "------------------------------------------------------"
|
|
echo "扫描完成"
|