Package: portscan
PortScanPortScan is alight-weightcommand line utility that allows user to conduct scanning over a range of IP addresses and port ranges with multi-threading. Helpful with finding local stuff like printer, headless raspberry pi, or scanning remote blocks for open ranges of ports.Install:pip install portscanUpgrade:pip install portscan --upgradeUsage:portscan [192.168.1.0/24] [-p 22,80-200 [-t 100 [-w 1 [-e]]]]$ portscan -w 0.2
No IP string found, using local address
Local IP found to be 192.168.1.175, scanning entire block
Threads will wait for ping response for 0.2 seconds
192.168.1.1:80 OPEN
192.168.1.1:443 OPEN
192.168.1.167:443 OPEN
192.168.1.167:80 OPEN
Pinged 1024 portsBy default the command checks for yourLocal Area NetworkIP first, and then initiate a block wise search. specify IP if you want to search any other IP blocks.Note: This is not available before 0.2.1, please update or specify IP if you're using 0.2.0 and olderUse-w [float]to change timeout settings from default of3seconds: for LAN, this can be as low as0.1.1is usually good enough for continental level connection.To show more ports that have denied/refused connection, use-e, this will show you all ports that are not timed out.$ portscan 174.109.64.0/24 -w 0.5 -e
Threads will wait for ping response for 0.5 seconds
174.109.64.3:443 ERRNO 61, Connection refused
174.109.64.3:23 ERRNO 61, Connection refused
174.109.64.3:80 ERRNO 61, Connection refused
174.109.64.3:22 ERRNO 61, Connection refused
174.109.64.88:80 ERRNO 61, Connection refused
174.109.64.88:23 ERRNO 61, Connection refused
174.109.64.88:443 ERRNO 61, Connection refused
174.109.64.88:22 ERRNO 61, Connection refused
174.109.64.125:443 OPEN
Pinged 1024 portsArgumentsip: default and optional(since 0.2.1, required before 0.2.1)argument, can parse single IP, list of IP, IP blocks:192.168.1.0 # single IP

192.168.1.0/24 # A 24 block, from 192.168.1.0 to 192.168.1.255

[192.168.1.0/24,8.8.8.8] # The aforementioned 24 block and 8.8.8.8.Options:-p,--port: port range, default22,23,80, use,as a delimiter without space, support port range (e.g.22-100,5000).-t,--threadnum: thread numbers, default 500, as of now, thread number have a hard cap of 2048. More thread will increase performance on large scale scans.-e,--show_refused: show connection errors other than timeouts, e.g. connection refused, permission denied with errno number as they happen.-w,--wait: Wait time for socket to respond. If scanning LAN or relatively fast internet connection, this can be set to1or even0.1for faster (local) scanning, but this runs a risk of missing the open ports. Default to3seconds-s,--stop_after: Number of open ports to be discovered after which scan would be gracefully stopped. Default is None for not stopping. Note that it will continue to finish what's left in the queue, so the number of open ports returned might be greater than the value passed in.Python APIOne can also use this portscan inside existing python scripts.Consider following example for finding out adb port for Android device in LAN with static IP:fromportscanimportPortScanip='192.168.1.42'port_range='5555,37000-44000'scanner=PortScan(ip,port_range,thread_num=500,show_refused=False,wait_time=1,stop_after_count=True)open_port_discovered=scanner.run()# <----- actual scan# run returns a list of (ip, open_port) tuplesadb_port=int(open_port_discovered[0][1])# Usecase specific partfromadb_shell.adb_deviceimportAdbDeviceTcp,AdbDeviceUsbdevice1=AdbDeviceTcp(ip,adb_port,default_transport_timeout_s=9)device1.connect(rsa_keys=[python_rsa_signer],auth_timeout_s=0.1)# adb connect# shell execnotifications_dump=device1.shell('dumpsys notification').encode().decode('ascii','ignore')device1.close()print(notifications_dump)AcknowledgementJamieson Becker: For coming up with a way to find local IP on stackoverflow, which I used:https://stackoverflow.com/questions/166506/finding-local-ip-addresses-using-pythons-stdlibMihir Parikh: Thanks for picking up my ancient project and verifying/supporting Windows and adding flags/return. And for convincing me to wrap it up and putting it in a better place than 4 years ago.