import os
import subprocess


################################################################################################
# Service DTO

class ServiceDTO:
    # Class Constructor
    def __init__(self, port, name, description):
        self.description = description
        self.port = port
        self.name = name


#################################################################################################
# Utils Functions

# Common separator line for the application
separator_single_line = '------------------------------------------------------------'
separator_double_line = '============================================================'

# Report path
report_path = '/reports/'


# Printing Red Text for errors
def print_red(text): print("\033[91m {}\033[00m".format (text))


# Printing Green Text for messages
def print_green(text): print("\033[92m {}\033[00m".format (text))


# Printing Yellow Text for warnings
def print_yellow(text): print("\033[93m {}\033[00m".format (text))


# Description: Save the results to a file
# Return: (void)
def save_results(results, folder_name, file_name):
    try:
        # Save the results to a folder/file
        file_name_path = folder_name + "/" + file_name

        # If the folder does not exist then create it
        if not os.path.isdir (folder_name):
            os.mkdir (folder_name)

        # Create the file object
        file_to_save = open (file_name_path, 'w')
        # Make sure the output is correctly encoded
        results = results.encode ('utf-8')
        # Write the changes
        file_to_save.write (results)
        # Close file object
        file_to_save.close ()
    except Exception, e:
        exception_message = str (e)
        print_red ('[!] Error: Cannot save the results to a file! Reason:\r\n' + exception_message)


# Description: Execute a command
# Return: The output after command execution
def execute_cmd(tool_name, cmd):
    start_msg = "[+] Starting %s ..." % tool_name
    print_green (start_msg)
    # The output variable that stores the output from the command line
    output = ''

    try:
        # Cleanup the command string
        cmd = cmd.rstrip()
        # Execute the command
        output += subprocess.check_output(cmd, shell=True, stderr=subprocess.STDOUT)
        # Add a new line
        output += '\r\n'
    except Exception, e:
        exception_message = str (e)
        output += exception_message
        print_red ("[!] Error executing the command: " + cmd + " Reason:\r\n" + exception_message)
        output += '\r\n'

    output += separator_single_line + '\r\n'

    end_msg = "[+] Finished %s ..." % tool_name
    print_green (end_msg)
    return output


# Printing an error message after executing a cmd
def error_execution(tool_name): print_red ("Error Executing " + tool_name)


##################################################################################################
# FTP Enum

nmap_ftp_tool_name = 'NMAP FTP Enum'

# Description: Execute an Nmap FTP enum command
# Return: The output after command execution
def execute_nmap_ftp_enum(ip_address, port_number):
    command = "nmap -sV -p %s --script=ftp* %s" % (port_number, ip_address)
    return execute_cmd (nmap_ftp_tool_name, command)

# Execute FTP Enum
def enum_ftp(ip_address, port_number):
    output = ''
    try:
        nmap_output = execute_nmap_ftp_enum (ip_address, port_number)
        output += nmap_output
    except:
        error_execution (nmap_ftp_tool_name)

    return output


##################################################################################################
# HTTP Enum

nmap_tool_name = 'NMAP HTTP Enum'
crawler_tool_name = 'Gobuster'

# Description: Execute an Nmap HTTP enum command
# Return: The output after command execution
def execute_nmap_http_enum(ip_address, port_number):
    command = "nmap -sV -p %s --script=http-enum,http-vuln*  %s" % (port_number, ip_address)
    return execute_cmd (nmap_tool_name, command)

# Description: Execute an HTTP browsing enum command
# Return: The output after command execution
def execute_directories_http_enum(ip_address, port_number):
    command = "gobuster -u http://%s:%s -w /usr/share/wordlists/dirb/common.txt -s '200,204,301,302,307,403,500' -e" % (
        ip_address, port_number)
    return execute_cmd (crawler_tool_name, command)

# Execute HTTP Enum
def enum_http(ip_address, port_number):
    output = ''
    try:
        nmap_output = execute_nmap_http_enum (ip_address, port_number)
        output += nmap_output
    except:
        error_execution (nmap_tool_name)

    try:
        gobuster_output = execute_directories_http_enum (ip_address, port_number)
        output += gobuster_output
    except:
        error_execution (crawler_tool_name)

    return output


##################################################################################################
# Automate Core

# Description: Parse the nmap results
# Return: A list of service object
def parse_nmap_output(nmap_output):
    service_names_list = {}
    nmap_output = nmap_output.split ("\n")
    for output_line in nmap_output:
        output_line = output_line.strip ()
        services_list = []
        # if port is opened
        if ("tcp" in output_line) and ("open" in output_line) and not ("Discovered" in output_line):
            # cleanup the spaces
            while "  " in output_line:
                output_line = output_line.replace ("  ", " ")
            # Split the line
            output_line_split = output_line.split (" ")
            # The third part of the split is the service name
            service_name = output_line_split[2]
            # The first part of the split is the port number
            port_number = output_line_split[0]

            # It's time to get the service description
            output_line_split_length = len (output_line_split)
            end_position = output_line_split_length - 1
            current_position = 3
            service_description = ''

            while current_position <= end_position:
                service_description += ' ' + output_line_split[current_position]
                current_position += 1

            # Create the service Object
            service = ServiceDTO (port_number, service_name, service_description)
            # Make sure to add a new service if another one already exists on a different port number
            if service_name in service_names_list:
                # Get the objects that are previously saved
                services_list = service_names_list[service_name]

            services_list.append (service)
            service_names_list[service_name] = services_list

    return service_names_list

# Start the enumeration process after the TCP scan
def start_enumeration_process(nmap_output_services_list, ip_address):
    enum_output = ''
    for service_name in nmap_output_services_list:
        services = nmap_output_services_list[service_name]
        if service_name == "http":
            for service in services:
                port_number = service.port.split("/")[0]
                enum_output += enum_http(ip_address,port_number)
        elif "ftp" in service_name:
            for service in services:
                port_number = service.port.split ("/")[0]
                enum_output += enum_ftp(ip_address,port_number)

    save_results(enum_output,'./reports', ip_address+".txt")

# Start Nmap TCP Scan
def start_nmap_tcp_scan(ip_address):
    nmap_tcp_command = "nmap -T4 -sS -sV -sC -p- -O --open --osscan-guess --version-all %s" % ip_address
    nmap_tcp_output = execute_cmd ('Nmap TCP Scan', nmap_tcp_command)
    #Parse the nmap scan results
    service_names_list = parse_nmap_output(nmap_tcp_output)
    #Start the enumeration process
    start_enumeration_process(service_names_list,ip_address)
    print_yellow("[!] The Program Scanner Has Finished The Execution (report saved to /reports)")


def main():
    print 'Welcome to PowerScan Let\'s Start'
    print separator_double_line
    print 'What is the IP address that you want to scan:'
    ip_address = raw_input ("IP>")
    print separator_double_line
    start_nmap_tcp_scan (ip_address)
    print separator_double_line


if __name__ == '__main__':
    main ()

import os
import subprocess


################################################################################################
# Service DTO

class ServiceDTO:
    # Class Constructor
    def __init__(self, port, name, description):
        self.description = description
        self.port = port
        self.name = name


#################################################################################################
# Utils Functions

# Common separator line for the application
separator_single_line = '------------------------------------------------------------'
separator_double_line = '============================================================'

# Report path
report_path = '/reports/'


# Printing Red Text for errors
def print_red(text): print("\033[91m {}\033[00m".format (text))


# Printing Green Text for messages
def print_green(text): print("\033[92m {}\033[00m".format (text))


# Printing Yellow Text for warnings
def print_yellow(text): print("\033[93m {}\033[00m".format (text))


# Description: Save the results to a file
# Return: (void)
def save_results(results, folder_name, file_name):
    try:
        # Save the results to a folder/file
        file_name_path = folder_name + "/" + file_name

        # If the folder does not exist then create it
        if not os.path.isdir (folder_name):
            os.mkdir (folder_name)

        # Create the file object
        file_to_save = open (file_name_path, 'w')
        # Make sure the output is correctly encoded
        results = results.encode ('utf-8')
        # Write the changes
        file_to_save.write (results)
        # Close file object
        file_to_save.close ()
    except Exception, e:
        exception_message = str (e)
        print_red ('[!] Error: Cannot save the results to a file! Reason:\r\n' + exception_message)


# Description: Execute a command
# Return: The output after command execution
def execute_cmd(tool_name, cmd):
    start_msg = "[+] Starting %s ..." % tool_name
    print_green (start_msg)
    # The output variable that stores the output from the command line
    output = ''

    try:
        # Cleanup the command string
        cmd = cmd.rstrip()
        # Execute the command
        output += subprocess.check_output(cmd, shell=True, stderr=subprocess.STDOUT)
        # Add a new line
        output += '\r\n'
    except Exception, e:
        exception_message = str (e)
        output += exception_message
        print_red ("[!] Error executing the command: " + cmd + " Reason:\r\n" + exception_message)
        output += '\r\n'

    output += separator_single_line + '\r\n'

    end_msg = "[+] Finished %s ..." % tool_name
    print_green (end_msg)
    return output


# Printing an error message after executing a cmd
def error_execution(tool_name): print_red ("Error Executing " + tool_name)


##################################################################################################
# FTP Enum

nmap_ftp_tool_name = 'NMAP FTP Enum'

# Description: Execute an Nmap FTP enum command
# Return: The output after command execution
def execute_nmap_ftp_enum(ip_address, port_number):
    command = "nmap -sV -p %s --script=ftp* %s" % (port_number, ip_address)
    return execute_cmd (nmap_ftp_tool_name, command)

# Execute FTP Enum
def enum_ftp(ip_address, port_number):
    output = ''
    try:
        nmap_output = execute_nmap_ftp_enum (ip_address, port_number)
        output += nmap_output
    except:
        error_execution (nmap_ftp_tool_name)

    return output


##################################################################################################
# HTTP Enum

nmap_tool_name = 'NMAP HTTP Enum'
crawler_tool_name = 'Gobuster'

# Description: Execute an Nmap HTTP enum command
# Return: The output after command execution
def execute_nmap_http_enum(ip_address, port_number):
    command = "nmap -sV -p %s --script=http-enum,http-vuln*  %s" % (port_number, ip_address)
    return execute_cmd (nmap_tool_name, command)

# Description: Execute an HTTP browsing enum command
# Return: The output after command execution
def execute_directories_http_enum(ip_address, port_number):
    command = "gobuster -u http://%s:%s -w /usr/share/wordlists/dirb/common.txt -s '200,204,301,302,307,403,500' -e" % (
        ip_address, port_number)
    return execute_cmd (crawler_tool_name, command)

# Execute HTTP Enum
def enum_http(ip_address, port_number):
    output = ''
    try:
        nmap_output = execute_nmap_http_enum (ip_address, port_number)
        output += nmap_output
    except:
        error_execution (nmap_tool_name)

    try:
        gobuster_output = execute_directories_http_enum (ip_address, port_number)
        output += gobuster_output
    except:
        error_execution (crawler_tool_name)

    return output


##################################################################################################
# Automate Core

# Description: Parse the nmap results
# Return: A list of service object
def parse_nmap_output(nmap_output):
    service_names_list = {}
    nmap_output = nmap_output.split ("\n")
    for output_line in nmap_output:
        output_line = output_line.strip ()
        services_list = []
        # if port is opened
        if ("tcp" in output_line) and ("open" in output_line) and not ("Discovered" in output_line):
            # cleanup the spaces
            while "  " in output_line:
                output_line = output_line.replace ("  ", " ")
            # Split the line
            output_line_split = output_line.split (" ")
            # The third part of the split is the service name
            service_name = output_line_split[2]
            # The first part of the split is the port number
            port_number = output_line_split[0]

            # It's time to get the service description
            output_line_split_length = len (output_line_split)
            end_position = output_line_split_length - 1
            current_position = 3
            service_description = ''

            while current_position <= end_position:
                service_description += ' ' + output_line_split[current_position]
                current_position += 1

            # Create the service Object
            service = ServiceDTO (port_number, service_name, service_description)
            # Make sure to add a new service if another one already exists on a different port number
            if service_name in service_names_list:
                # Get the objects that are previously saved
                services_list = service_names_list[service_name]

            services_list.append (service)
            service_names_list[service_name] = services_list

    return service_names_list

# Start the enumeration process after the TCP scan
def start_enumeration_process(nmap_output_services_list, ip_address):
    enum_output = ''
    for service_name in nmap_output_services_list:
        services = nmap_output_services_list[service_name]
        if service_name == "http":
            for service in services:
                port_number = service.port.split("/")[0]
                enum_output += enum_http(ip_address,port_number)
        elif "ftp" in service_name:
            for service in services:
                port_number = service.port.split ("/")[0]
                enum_output += enum_ftp(ip_address,port_number)

    save_results(enum_output,'./reports', ip_address+".txt")

# Start Nmap TCP Scan
def start_nmap_tcp_scan(ip_address):
    nmap_tcp_command = "nmap -T4 -sS -sV -sC -p- -O --open --osscan-guess --version-all %s" % ip_address
    nmap_tcp_output = execute_cmd ('Nmap TCP Scan', nmap_tcp_command)
    #Parse the nmap scan results
    service_names_list = parse_nmap_output(nmap_tcp_output)
    #Start the enumeration process
    start_enumeration_process(service_names_list,ip_address)
    print_yellow("[!] The Program Scanner Has Finished The Execution (report saved to /reports)")


def main():
    print 'Welcome to PowerScan Let\'s Start'
    print separator_double_line
    print 'What is the IP address that you want to scan:'
    ip_address = raw_input ("IP>")
    print separator_double_line
    start_nmap_tcp_scan (ip_address)
    print separator_double_line


if __name__ == '__main__':
    main ()

################################################################################################ # Service DTO # Class Constructor ################################################################################################# # Utils Functions # Common separator line for the application # Report path # Printing Red Text for errors # Printing Green Text for messages # Printing Yellow Text for warnings # Description: Save the results to a file # Return: (void) # Save the results to a folder/file # If the folder does not exist then create it # Create the file object # Make sure the output is correctly encoded # Write the changes # Close file object # Description: Execute a command # Return: The output after command execution # The output variable that stores the output from the command line # Cleanup the command string # Execute the command # Add a new line # Printing an error message after executing a cmd ################################################################################################## # FTP Enum # Description: Execute an Nmap FTP enum command # Return: The output after command execution # Execute FTP Enum ################################################################################################## # HTTP Enum # Description: Execute an Nmap HTTP enum command # Return: The output after command execution # Description: Execute an HTTP browsing enum command # Return: The output after command execution # Execute HTTP Enum ################################################################################################## # Automate Core # Description: Parse the nmap results # Return: A list of service object # if port is opened # cleanup the spaces # Split the line # The third part of the split is the service name # The first part of the split is the port number # It's time to get the service description # Create the service Object # Make sure to add a new service if another one already exists on a different port number # Get the objects that are previously saved # Start the enumeration process after the TCP scan # Start Nmap TCP Scan #Parse the nmap scan results #Start the enumeration process