编写自己的扫描器

1.先cd到scanner目录 cd /usr/share/metasploit-framework/modules/auxiliary/scanner/ 2.写简单的TCP扫描脚本，以下是用Ruby语言写的 意思是连接远程的12345端口，并发送HELLO WORLD字符串 #Metasploit require 'msf/core' class Metasploit3 < Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Scanner def initialize super( 'Name' => 'My custom TCP scan', 'Version' => '$Revision: 1 $', 'Description' => 'My quick scanner', 'Author' => 'Your name here', 'License' => MSF_LICENSE ) register_options( [ Opt::RPORT(12345) ], self.class) end def run_host(ip) connect() greeting = "HELLO SERVER" sock.puts(greeting) data = sock.recv(1024) print_status("Received: #{data} from #{ip}") disconnect() end end 3.上述代码保存为simple_tcp.rb文件 然后将此文件复制到第一步所对应的目录下 cp /root/simple_tcp.rb simple_tcp.rb 4.win下运行Python编写的TCP服务端 5.msf中use auxiliary/scanner/simple_tcp.rb set RHOSTS 192.168.15.15 run