Anat is a network discoverer and a port scanner that is written in Python. This is an ethical hacking educational tool used for educational purposes only (please see code of conduct). The tool is similar to a simple version of the famous nmap tool: a network exploration tool and a port scanner. The tool is also similar to a simple version of the Debian Netdiscover which is an ARP reconnaissance tool. Anat is named after the war Goddess of the Phoenician.
The tool is part of an ethical hacking educational toolset which is normally taught in ethical hacking and computer security degrees or courses (please see code of conduct).
Anat is part of a toolset of ethical hacking tools that I will publish gradually on Github.
- Tanit Keylogger (Language: Python) - Go to repository URL.
- Adonis ARP Spoofer (Language: Python) - Go to repository URL.
- Simple MAC Changer (Language: Python), repository URL (will be added later).
- Anat Network Discoverer and Port Scanner (Language: Python), current repository.
- Hadad Packet Sniffer (Language: Python), repository URL (will be added later).
- Shahar DNS Spoofer (Language: Python), repository URL (will be added later).
- Sweet Death Virus (Language: Python), repository URL (will be added later).
- Baal Backdoor (Language: Python), repository URL (will be added later).
- Vulnerability Scanner (Language: Python), repository URL (will be added later).
Launching this tool against unauthorised and unwilling users is both immoral and illegal. As a white hat hacker or security specialist, your job after taking permission, is to discover vulnerabilities in programs, systems and networks (white hat hacking) or help in discovering any gullibility in users (by social engineering). Thus, you can launch Anat or any other tool I might publish later in this hacking series only when you are given explicit permission by the company that hires you or you only launch it against your own servers or networks. This tool is written after taking several Ethical Hacking and Security courses. So, in other words, the code (which has a generated executable intentionally detectable by antiviruses) can be found in a form or another in many ethical hacking books and courses. I have added some enhancements on the tool of course. To reiterate: This is a tool written for the sole purpose of teaching you how a network ARP reconnaissance tool and a port scanner work and it also shows you how much it is easy to write a simple, effective and yet powerful network scanner in Python. This tool is for educational purposes only and it is not meant to be used in any harmful way. To reiterate, this tool is meant to be a tool to be studied by white hat hackers and security specialists and is not meant to be deployed or used against users that do not give you explicit permission.
Anat constitutes two Python files:
- NetworkDiscoverer.py is an ARP reconnaissance tool that displays all IPs, MAC addresses and MAC vendor names of all the devices connected to your network.
- PortScanner.py is a port scanner that scan specified ports on a device/machine and check whether the ports are open or close.
You need to install the following Python modules. You can install them by using pip3 or any other method that you are confortable with:
- termcolor module for coloring the terminal text
- scapy module for the communication using ARP
- mac_vendor_lookup for getting the MAC vendor name
To use NetworkDiscoverer.py, you need to find your IP and subnet mask from your terminal/command line via ifconfig (Linux/MacOS) or ipconfig (MS Windows) and get the subnet.
python3 NetworkDiscoverer.py - t 192.168.0.0/24
This will scan the whole subnet and will print all the devices connected to your network including all IPs, MAC addresses and MAC vendor names.
To use PortScanner.py, you need a target machine IP or a discoverable domain name and you need to specify one or more ports to scan, so you can know if they are open or close.
python3 PortScanner.py -H 192.168.0.17 -p 80
Or
python3 PortScanner.py - H 192.168.0.17 -p 22,80,443,560
You need the pyinstaller. You can install it via pip or pip3 or via apt package manager.
pip install pyinstaller
A program called pyinstaller is installed in the Python directory. On Windows, it would be an executable: pyinstaller.exe
To package the file as a .exe for MS Windows, move your python file(s) to a folder and run pyinstaller as follows. NB: the --onefile switch is needed especially when you have many python files:
pyinstaller PortScanner.py --onefile
and
pyinstaller NetworkDiscoverer.py --onefile
Your .exe files will be found in the respective dist folders.
As you know, in order to run a Windows .exe or .msi or anything similar on a Linux OS or even on Mac OS, you need a lovely program called wine. I would assume you have installed wine on Linux. Go to the official Python Website and download the right Python 2.7.x msi installation file or (whatever version for Python 3.x.x). Navigate on your Linux to the directory of the download folder of this file and then run the following command: (/i is for installing):
wine msiexec /i python-2.7.14.msi
You will get a normal installation process as you would have on any MS Windows OS, please follow the instructions to install the Python interpreter. All Programs are usually installed in wine in a hidden folder called '.wine' in the Home folder of the user. So probably your Windows Python will be installed in ~/.wine/drive_c/Python27/ and in there you will find all the executables that are normally installed with any Python interpreter like Python.exe, pip.exe etc. Navigate to this folder and run via wine the Python interpreter invoking pip in order for you to install as above the 'pyinstaller' module.
PS: wine does not access the pip modules of the Linux so this why you need to do this.
cd ~/.wine/drive_c/Python27/
wine python.exe -m pip install pyinstaller
After the installation of the module terminates successively, you will find the pyinstalller.exe in the Scripts directory. To install pynput (why? as mentioned above, you need to do that as even this module is installed on Linux OS level, the Windows Python interpreter needs this)
wine python.exe -m pip install pynput
You can then package Anat into a single executable:
wine /root/.wine/drive_c/Python27/Scripts/pyinstaller.exe NetworkDiscoverer.py --onefile
The binary will be stored in the dist folder.
If you are on a Mac OS, the process is the same for installing 'pyinstaller'. First install pyinstaller through latest pip - with sudo privileges. NB: it is better to get the latest pip so to avoid errors.
sudo pip install pyinstaller
Then run pyinstaller on main.py
pyinstaller main.py --onefile
The binary will be stored in the dist folder.
The process is similar to what is explained in the previous sections. The good thing in Linux is that binaries like this tool don't get executed by just making the user double click them, they need to be run from the terminal after chmod +x makes them executable.
For PortScanner.py:
- Compare the banner information received from the open network ports with the most vulnerabilities discovered. Vulnerabilities would be stored either in a file or in a sqlite database.
- Let users include ranges of ports such as -p 22-300 since now we can only write comma seperated ports or single port. Try to make it work with a mixture of ranges and comma sperated values eg: -p 22,45,50-90 meaning port 22, port 45 and all ports from 50 to 90.
For NetworkDiscoverer.py:
- Let the tool find automatically the IP and Subnet mask of the machine that it is running on and then create an optargs option to say something like --mynet. This feature would make the process more automatic. This would be cool as it will allow hackers to just run the program without specifying an IP and would retrieve all devices connected tp the network.
This program is licensed under MIT License - you are free to distribute, change, enhance and include any of the code of this application in your tools. I only expect adequate attribution and citation of this work. The attribution should include the title of the program, the author (me!) and the site or the document where the program is taken from.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent