porthawk 2.0.0__tar.gz

porthawk-2.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PortHawk Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

porthawk-2.0.0/PKG-INFO

@@ -0,0 +1,11 @@
+Metadata-Version: 2.4
+Name: porthawk
+Version: 2.0.0
+Summary: Fast multi-threaded port scanner - Nmap alternative
+Author: shivarajp24
+Requires-Python: >=3.10
+License-File: LICENSE
+Dynamic: author
+Dynamic: license-file
+Dynamic: requires-python
+Dynamic: summary

porthawk-2.0.0/README.md

@@ -0,0 +1,237 @@
+# PortHawk 🦅
+
+## PortHawk — Nmap Alternative | Python Port Scanner | Network Security Tool
+
+Keywords: port scanner, nmap alternative, python port scanner, 
+network scanner, vulnerability scanner, open source security tool,
+port scanning tool, ethical hacking tool, penetration testing
+A fast, multi-threaded port scanner written in pure Python — no dependencies required.
+
+```
+  ____            _   _   _                _    
+ |  _ \ ___  _ __| |_| | | | __ ___      _| | __
+ | |_) / _ \| '__| __| |_| |/ _` \ \ /\ / / |/ /
+ |  __/ (_) | |  | |_|  _  | (_| |\ V  V /|   < 
+ |_|   \___/|_|   \__|_| |_|\__,_| \_/\_/ |_|\_\
+```
+
+> ⚠️ **Legal Notice:** Only scan systems you own or have explicit written permission to test. Unauthorized port scanning may violate laws (Computer Fraud and Abuse Act, IT Act, etc.) in your jurisdiction.
+
+---
+
+## Features
+
+- **TCP & UDP scanning** — connect scan (no root needed) and UDP probing
+- **Banner grabbing** — identify services running on open ports
+- **CIDR support** — scan entire subnets (e.g. `10.0.0.0/24`)
+- **Flexible port specs** — ranges, lists, named sets (`common`, `all`)
+- **Multi-threaded** — up to 500 concurrent threads
+- **Multiple output formats** — colored terminal table, JSON, CSV
+- **Zero dependencies** — pure Python standard library only
+
+---
+
+## Installation
+
+### From PyPI (once published)
+```bash
+pip install porthawk
+```
+
+### From source
+```bash
+git clone https://github.com/shivarajp24/porthawk.git
+cd porthawk
+pip install -e .
+```
+
+### Run without installing
+```bash
+python -m portscanner.cli <target>
+```
+
+---
+
+## Usage
+
+### Basic scan (top common ports)
+```bash
+porthawk scanme.nmap.org
+```
+
+### Specific ports
+```bash
+porthawk 192.168.1.1 -p 22,80,443,8080
+```
+
+### Port range with banner grabbing
+```bash
+porthawk 10.0.0.1 -p 1-1000 --banner
+```
+
+### Full scan with more threads
+```bash
+porthawk 192.168.1.1 -p all --threads 300 --timeout 0.5
+```
+
+### Scan an entire subnet
+```bash
+porthawk 192.168.1.0/24 -p common
+```
+
+### UDP scan
+```bash
+porthawk 192.168.1.1 -p 53,67,68,69,123,161 --scan-type udp
+```
+
+### Save results to JSON
+```bash
+porthawk 192.168.1.1 -p common --output results.json --format json
+```
+
+### Save results to CSV
+```bash
+porthawk 192.168.1.1 -p 1-1000 --output results.csv --format csv
+```
+
+---
+
+## CLI Reference
+
+```
+usage: porthawk [-h] [-p PORTS] [-t N] [--timeout SEC]
+                [--scan-type {tcp,udp}] [--banner] [--show-closed]
+                [-o FILE] [-f {text,json,csv}] [--no-color] [-v]
+                target
+
+positional arguments:
+  target                IP, hostname, or CIDR block
+
+options:
+  -p, --ports PORTS     Ports: '80', '20-25', '22,80,443', 'common', 'all'
+                        (default: common)
+  -t, --threads N       Concurrent threads (default: 100, max: 500)
+  --timeout SEC         Socket timeout in seconds (default: 1.0)
+  --scan-type {tcp,udp} tcp or udp (default: tcp)
+  --banner              Grab service banners from open ports
+  --show-closed         Also show closed/filtered ports
+  -o, --output FILE     Save results to file
+  -f, --format FORMAT   Output format: text, json, csv (default: text)
+  --no-color            Disable colored output
+  -v, --version         Show version and exit
+```
+
+---
+
+## Using as a Python Library
+
+```python
+from portscanner import Scanner, parse_ports
+
+ports = parse_ports("22,80,443,8000-8090")
+
+scanner = Scanner(
+    host="192.168.1.1",
+    ports=ports,
+    scan_type="tcp",
+    threads=150,
+    timeout=1.0,
+    grab_banners=True,
+)
+
+result = scanner.run()
+
+print(f"Scanned {result.host} in {result.duration}s")
+for port in result.open_ports:
+    print(f"  {port.port}/tcp  {port.service}  {port.banner}")
+```
+
+### Scan a CIDR with callback
+```python
+from portscanner import Scanner, parse_ports, expand_cidr
+
+ports = parse_ports("22,80,443")
+
+for ip in expand_cidr("192.168.1.0/24"):
+    scanner = Scanner(host=ip, ports=ports, threads=50)
+    result = scanner.run(callback=lambda r: print(r) if r.state == "open" else None)
+```
+
+---
+
+## Sample Output
+
+```
+  PORT     STATE          SERVICE        LATENCY   BANNER
+  -------------------------------------------------------
+  22       open           SSH              4.2ms   SSH-2.0-OpenSSH_8.9p1
+  80       open           HTTP             2.1ms   HTTP/1.1 200 OK
+  443      open           HTTPS            3.8ms   HTTP/1.1 200 OK
+  8080     open           HTTP-Alt         2.9ms
+
+  4 open port(s) found on scanme.nmap.org in 3.41s
+```
+
+---
+
+## Running Tests
+
+```bash
+pip install pytest
+pytest tests/ -v
+```
+
+---
+
+## Project Structure
+
+```
+porthawk/
+├── portscanner/
+│   ├── __init__.py      # Public API
+│   ├── scanner.py       # Core scan engine (TCP, UDP, banner)
+│   ├── utils.py         # Port parsing, CIDR expansion, host resolution
+│   ├── output.py        # Table, JSON, CSV formatters
+│   └── cli.py           # argparse CLI entry point
+├── tests/
+│   ├── test_scanner.py
+│   └── test_utils.py
+├── pyproject.toml
+├── LICENSE
+└── README.md
+```
+
+---
+
+## Comparison with Nmap
+
+| Feature              | PortHawk        | Nmap            |
+|----------------------|-----------------|-----------------|
+| Language             | Python (pure)   | C               |
+| Root required (TCP)  | No              | No (connect)    |
+| Root required (SYN)  | —               | Yes             |
+| OS fingerprinting    | No              | Yes             |
+| Script engine (NSE)  | No              | Yes             |
+| Banner grabbing      | Basic           | Advanced        |
+| Dependencies         | None            | libpcap         |
+| Install              | `pip install`   | System package  |
+| Output formats       | Table/JSON/CSV  | Many            |
+
+PortHawk is lighter and easier to embed in Python scripts; Nmap is more feature-complete for professional pentesting.
+
+---
+
+## Contributing
+
+Pull requests welcome! Please open an issue first for major changes.
+
+1. Fork the repo
+2. Create a feature branch: `git checkout -b feature/my-feature`
+3. Run tests: `pytest tests/ -v`
+4. Submit a PR
+
+---
+
+## License
+
+MIT — see [LICENSE](LICENSE).

porthawk-2.0.0/porthawk.egg-info/PKG-INFO

@@ -0,0 +1,11 @@
+Metadata-Version: 2.4
+Name: porthawk
+Version: 2.0.0
+Summary: Fast multi-threaded port scanner - Nmap alternative
+Author: shivarajp24
+Requires-Python: >=3.10
+License-File: LICENSE
+Dynamic: author
+Dynamic: license-file
+Dynamic: requires-python
+Dynamic: summary

porthawk-2.0.0/porthawk.egg-info/SOURCES.txt

@@ -0,0 +1,23 @@
+LICENSE
+README.md
+setup.py
+porthawk.egg-info/PKG-INFO
+porthawk.egg-info/SOURCES.txt
+porthawk.egg-info/dependency_links.txt
+porthawk.egg-info/entry_points.txt
+porthawk.egg-info/top_level.txt
+portscanner/__init__.py
+portscanner/advanced_scan.py
+portscanner/bruteforce.py
+portscanner/cli.py
+portscanner/discovery.py
+portscanner/intel.py
+portscanner/notify.py
+portscanner/output.py
+portscanner/proxy.py
+portscanner/report.py
+portscanner/scanner.py
+portscanner/utils.py
+portscanner/version.py
+portscanner/vuln.py
+portscanner/web_vuln.py

porthawk-2.0.0/porthawk.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

porthawk-2.0.0/porthawk.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+porthawk = portscanner.cli:main

porthawk-2.0.0/porthawk.egg-info/top_level.txt

@@ -0,0 +1 @@
+portscanner

porthawk-2.0.0/portscanner/__init__.py

@@ -0,0 +1,12 @@
+"""PortHawk — A fast, multi-threaded port scanner."""
+
+__version__ = "2.0.0"
+__author__ = "shivarajp24"
+
+from .scanner import Scanner, ScanResult, PortResult
+from .utils import parse_ports, expand_cidr, resolve_host
+
+__all__ = [
+    "Scanner", "ScanResult", "PortResult",
+    "parse_ports", "expand_cidr", "resolve_host",
+]

porthawk-2.0.0/portscanner/advanced_scan.py

@@ -0,0 +1,219 @@
+"""
+Advanced scanning: IP range, random order, service fingerprinting,
+WAF detection, CDN detection, subdomain enumeration.
+"""
+
+import socket
+import random
+import re
+import urllib.request
+import urllib.error
+import ssl
+import ipaddress
+from concurrent.futures import ThreadPoolExecutor, as_completed
+
+
+# ─── IP RANGE SCAN ──────────────────────────────────────────────────────────
+
+def parse_ip_range(ip_range: str) -> list:
+    """Parse 192.168.1.1-254 into list of IPs."""
+    if "-" in ip_range:
+        base, end = ip_range.rsplit(".", 1)
+        start_end = end.split("-")
+        if len(start_end) == 2:
+            start, stop = int(start_end[0]), int(start_end[1])
+            return [f"{base}.{i}" for i in range(start, stop + 1)]
+    return [ip_range]
+
+
+# ─── SERVICE FINGERPRINTING ─────────────────────────────────────────────────
+
+FINGERPRINTS = {
+    b"SSH":           "OpenSSH",
+    b"220":           "FTP/SMTP",
+    b"HTTP":          "HTTP Server",
+    b"220 ProFTPD":   "ProFTPD",
+    b"220 FileZilla": "FileZilla FTP",
+    b"RFB":           "VNC",
+    b"* OK":          "IMAP",
+    b"+OK":           "POP3",
+    b"AMQP":          "RabbitMQ",
+    b"\xff\xfb":      "Telnet",
+}
+
+def fingerprint_service(ip: str, port: int, timeout: float = 2.0) -> str:
+    """Deep service fingerprinting."""
+    try:
+        with socket.create_connection((ip, port), timeout=timeout) as s:
+            s.settimeout(timeout)
+            try:
+                banner = s.recv(1024)
+            except Exception:
+                banner = b""
+            for sig, name in FINGERPRINTS.items():
+                if sig in banner:
+                    return name
+            # HTTP probe
+            try:
+                s.sendall(b"HEAD / HTTP/1.0\r\n\r\n")
+                resp = s.recv(1024)
+                if b"HTTP" in resp:
+                    server = re.search(rb"Server: (.+)", resp)
+                    if server:
+                        return server.group(1).decode(errors="ignore").strip()
+                    return "HTTP Server"
+            except Exception:
+                pass
+            if banner:
+                return banner[:50].decode(errors="ignore").strip()
+    except Exception:
+        pass
+    return ""
+
+
+# ─── WAF DETECTION ──────────────────────────────────────────────────────────
+
+WAF_SIGNATURES = {
+    "Cloudflare":   ["cloudflare", "cf-ray", "__cfduid"],
+    "AWS WAF":      ["awswaf", "x-amzn-requestid"],
+    "Akamai":       ["akamai", "akamaighost"],
+    "Sucuri":       ["sucuri", "x-sucuri-id"],
+    "ModSecurity":  ["mod_security", "modsecurity"],
+    "Wordfence":    ["wordfence"],
+    "Imperva":      ["imperva", "incapsula", "visid_incap"],
+    "Barracuda":    ["barracuda"],
+    "F5 BIG-IP":    ["bigip", "f5"],
+    "Nginx WAF":    ["naxsi"],
+}
+
+def detect_waf(host: str, port: int = 80, timeout: float = 5.0) -> str:
+    """Detect Web Application Firewall."""
+    scheme = "https" if port in (443, 8443) else "http"
+    url = f"{scheme}://{host}:{port}/?<script>alert(1)</script>"
+    try:
+        ctx = ssl.create_default_context()
+        ctx.check_hostname = False
+        ctx.verify_mode = ssl.CERT_NONE
+        req = urllib.request.Request(url, headers={"User-Agent": "PortHawk/2.0"})
+        with urllib.request.urlopen(req, timeout=timeout, context=ctx) as r:
+            headers_str = str(r.headers).lower()
+            body = r.read(2048).decode(errors="ignore").lower()
+            combined = headers_str + body
+            for waf, sigs in WAF_SIGNATURES.items():
+                if any(s in combined for s in sigs):
+                    return waf
+    except urllib.error.HTTPError as e:
+        headers_str = str(e.headers).lower() if e.headers else ""
+        for waf, sigs in WAF_SIGNATURES.items():
+            if any(s in headers_str for s in sigs):
+                return waf
+    except Exception:
+        pass
+    return "None detected"
+
+
+# ─── CDN DETECTION ──────────────────────────────────────────────────────────
+
+CDN_SIGNATURES = {
+    "Cloudflare":   ["cloudflare.com", "cf-ray"],
+    "Akamai":       ["akamai", "akamaitech"],
+    "Fastly":       ["fastly", "x-fastly"],
+    "Amazon CloudFront": ["cloudfront.net", "x-amz-cf-id"],
+    "Google CDN":   ["google", "x-goog"],
+    "Azure CDN":    ["azure", "x-msedge"],
+    "Sucuri":       ["sucuri.net"],
+}
+
+def detect_cdn(host: str, port: int = 80, timeout: float = 5.0) -> str:
+    """Detect CDN provider."""
+    scheme = "https" if port in (443, 8443) else "http"
+    url = f"{scheme}://{host}:{port}/"
+    try:
+        ctx = ssl.create_default_context()
+        ctx.check_hostname = False
+        ctx.verify_mode = ssl.CERT_NONE
+        req = urllib.request.Request(url, headers={"User-Agent": "PortHawk/2.0"})
+        with urllib.request.urlopen(req, timeout=timeout, context=ctx) as r:
+            headers_str = str(r.headers).lower()
+            for cdn, sigs in CDN_SIGNATURES.items():
+                if any(s in headers_str for s in sigs):
+                    return cdn
+    except Exception:
+        pass
+    return "None detected"
+
+
+# ─── SUBDOMAIN ENUMERATION ──────────────────────────────────────────────────
+
+COMMON_SUBDOMAINS = [
+    "www", "mail", "ftp", "admin", "api", "dev", "test", "staging",
+    "blog", "shop", "app", "portal", "vpn", "ssh", "smtp", "pop",
+    "imap", "ns1", "ns2", "mx", "remote", "webmail", "cpanel",
+    "dashboard", "manage", "git", "jenkins", "gitlab", "jira",
+    "confluence", "docs", "cdn", "media", "static", "assets",
+    "beta", "alpha", "demo", "backup", "secure", "login", "auth",
+]
+
+def enumerate_subdomains(domain: str, threads: int = 50, timeout: float = 2.0) -> list:
+    """Enumerate common subdomains."""
+    found = []
+
+    def check(sub):
+        host = f"{sub}.{domain}"
+        try:
+            ip = socket.gethostbyname(host)
+            return {"subdomain": host, "ip": ip}
+        except Exception:
+            return None
+
+    with ThreadPoolExecutor(max_workers=threads) as ex:
+        futures = {ex.submit(check, sub): sub for sub in COMMON_SUBDOMAINS}
+        for f in as_completed(futures):
+            result = f.result()
+            if result:
+                found.append(result)
+
+    return sorted(found, key=lambda x: x["subdomain"])
+
+
+# ─── GEOIP ──────────────────────────────────────────────────────────────────
+
+def geoip_lookup(ip: str, timeout: float = 5.0) -> dict:
+    """GeoIP lookup using ip-api.com (free, no key needed)."""
+    try:
+        url = f"http://ip-api.com/json/{ip}?fields=country,regionName,city,isp,org,as"
+        req = urllib.request.Request(url, headers={"User-Agent": "PortHawk/2.0"})
+        with urllib.request.urlopen(req, timeout=timeout) as r:
+            import json
+            data = json.loads(r.read())
+            return {
+                "country":  data.get("country", ""),
+                "region":   data.get("regionName", ""),
+                "city":     data.get("city", ""),
+                "isp":      data.get("isp", ""),
+                "org":      data.get("org", ""),
+                "asn":      data.get("as", ""),
+            }
+    except Exception as e:
+        return {"error": str(e)}
+
+
+# ─── EMAIL HARVESTING ────────────────────────────────────────────────────────
+
+def harvest_emails(host: str, port: int = 80, timeout: float = 5.0) -> list:
+    """Find email addresses from web page source."""
+    scheme = "https" if port in (443, 8443) else "http"
+    url = f"{scheme}://{host}:{port}/"
+    emails = set()
+    try:
+        ctx = ssl.create_default_context()
+        ctx.check_hostname = False
+        ctx.verify_mode = ssl.CERT_NONE
+        req = urllib.request.Request(url, headers={"User-Agent": "PortHawk/2.0"})
+        with urllib.request.urlopen(req, timeout=timeout, context=ctx) as r:
+            body = r.read(65536).decode(errors="ignore")
+            found = re.findall(r"[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}", body)
+            emails.update(found)
+    except Exception:
+        pass
+    return list(emails)