VulnMapAI基于Nmap与Metasploit并结合OpenAI、deepseek的自动化渗透测试系统分析与总结

   def scan_range(self, subnet_address: str, start_port: int, end_port: int):
       self.logger.info(f"Scanning range {start_port}-{end_port} on subnet {subnet_address}")
       port_scanner = nmap.PortScanner()
       ports_enumeration = ",".join(self.ports[start_port:end_port + 1])
       port_scanner.scan(hosts=subnet_address, arguments='-sV -T3 -sT --script=discovery -p' + ports_enumeration)
       for scanned_host in port_scanner.all_hosts():
           for protocol_type in port_scanner[scanned_host].all_protocols():
               if protocol_type != "tcp":
                   continue
               for port_number in port_scanner[scanned_host][protocol_type].keys():
                   port_info = self.extract_port_info(scanned_host, protocol_type, port_number, port_scanner[scanned_host])
                   if port_info:
                       self.results_queue.put(port_info)
   该函数使用Nmap扫描指定子网的端口范围，并提取端口信息。

   def apply_exploits(self, exploits: List, target: Dict) -> List[str]:
       success_exploits = []
       for exploit_name in exploits:
           self.logger.info(f"Trying exploit {exploit_name}")
           exploit = self.client.modules.use('exploit', exploit_name)
           if 'RHOSTS' in exploit.options:
               exploit['RHOSTS'] = target['host']
           elif 'RHOST' in exploit.options:
               exploit['RHOST'] = target['host']
           if 'RPORT' in exploit.options:
               exploit['RPORT'] = target['port']
           for payload in self.client.call('module.compatible_payloads', [exploit_name])['payloads'][:self.max_try_payloads]:
               self.logger.info(f"Trying payload {payload}")
               exploit.execute(payload=payload)
               if self._wait_for_success():
                   success_exploits.append(exploit_name)
                   break
       return success_exploits
   该函数尝试对目标执行漏洞利用，并返回成功的漏洞利用模块列表。

   def advise_attack(self) -> str:
       self.logger.info(AdvisorConstants.ADVICE_ATTACK)
       prompts = self._load_prompts('advise_attack_prompt')
       json_data = {
           'model': 'gpt-4',
           'messages': [
               {'role': 'system', 'content': prompts['system']},
               {'role': 'user', 'content': prompts['user'].format(discovery_result=self.discovery_result)},
           ],
       }
       return self._query_api(json_data)
   该函数生成攻击建议的API请求内容，并调用OpenAI API获取结果,换成deepseek应该也是可以的。

   def prepare_report(self) -> Dict:
       discoveries = self.summarize_discoveries()
       advise = self.advise_attack()
       exploits = '<br>'.join(self.exploits)
       return {
           "title": self.title,
           "exploits": exploits,
           "discoveries": discoveries,
           "advise": advise,
           "full_discovery_result": self.full_discovery_result
       }
   该函数整合扫描结果、攻击建议和漏洞信息，生成报告内容。