VulnMapAI基于Nmap与Metasploit并结合OpenAI、deepseek的自动化渗透测试系统分析与总结

   def scan_range(self, subnet_address: str, start_port: int, end_port: int):       self.logger.info(f"Scanning range {start_port}-{end_port} on subnet {subnet_address}")       port_scanner = nmap.PortScanner()       ports_enumeration = ",".join(self.ports[start_port:end_port + 1])       port_scanner.scan(hosts=subnet_address, arguments='-sV -T3 -sT --script=discovery -p' + ports_enumeration)       for scanned_host in port_scanner.all_hosts():           for protocol_type in port_scanner[scanned_host].all_protocols():               if protocol_type != "tcp":                   continue               for port_number in port_scanner[scanned_host][protocol_type].keys():                   port_info = self.extract_port_info(scanned_host, protocol_type, port_number, port_scanner[scanned_host])                   if port_info:                       self.results_queue.put(port_info)   该函数使用Nmap扫描指定子网的端口范围，并提取端口信息。

   def apply_exploits(self, exploits: List, target: Dict) -> List[str]:       success_exploits = []       for exploit_name in exploits:           self.logger.info(f"Trying exploit {exploit_name}")           exploit = self.client.modules.use('exploit', exploit_name)           if 'RHOSTS' in exploit.options:               exploit['RHOSTS'] = target['host']           elif 'RHOST' in exploit.options:               exploit['RHOST'] = target['host']           if 'RPORT' in exploit.options:               exploit['RPORT'] = target['port']           for payload in self.client.call('module.compatible_payloads', [exploit_name])['payloads'][:self.max_try_payloads]:               self.logger.info(f"Trying payload {payload}")               exploit.execute(payload=payload)               if self._wait_for_success():                   success_exploits.append(exploit_name)                   break       return success_exploits   该函数尝试对目标执行漏洞利用，并返回成功的漏洞利用模块列表。

   def advise_attack(self) -> str:       self.logger.info(AdvisorConstants.ADVICE_ATTACK)       prompts = self._load_prompts('advise_attack_prompt')       json_data = {           'model': 'gpt-4',           'messages': [               {'role': 'system', 'content': prompts['system']},               {'role': 'user', 'content': prompts['user'].format(discovery_result=self.discovery_result)},           ],       }       return self._query_api(json_data)   该函数生成攻击建议的API请求内容，并调用OpenAI API获取结果,换成deepseek应该也是可以的。

   def prepare_report(self) -> Dict:       discoveries = self.summarize_discoveries()       advise = self.advise_attack()       exploits = '<br>'.join(self.exploits)       return {           "title": self.title,           "exploits": exploits,           "discoveries": discoveries,           "advise": advise,           "full_discovery_result": self.full_discovery_result       }   该函数整合扫描结果、攻击建议和漏洞信息，生成报告内容。