from scapy.all import IP, ICMP, sr1, conf, TCP, ARP, Ether, srp, UDP, DNS, DNSQR, Packet

conf.sniff_promisc = False

cible = "79.137.78.240"     # datafrance.fr, le site de Rachid
ports = [22, 80, 443, 8080, 3306]

# __truediv__
for port in ports:
    paquet = IP(dst= cible) / TCP(dport= port, flags= 'S')
    reponse = sr1(paquet, timeout= 1, verbose= 0)

    if reponse and reponse[TCP].flags == 'SA': # SYN-ACK, le serveur répond "oui" aux connexions
        print(f"Port {port}: ouvert")
    else:
        print(f"Port {port}: fermé ou filtré")

    
paquet = Ether(dst="ff:ff:ff:ff:ff:ff") / ARP(pdst="192.168.1.0/24") # Ether : adresse Broadcast (tous les appareils) / ARP : "qui a cette adresse ?"
reponses, _ = srp(paquet, timeout= 2, verbose= 0)
print(f"{len(reponses)} hôtes détectés: ")

for envoi, reception in reponses:
    print(f"{reception.psrc} -> {reception.hwsrc}")


requete = IP(dst= '1.1.1.1') / UDP(dport= 53) / DNS(
    rd= 1,                              # Recursive Desired (demande une réponse)
    qd= DNSQR(qname= "datafrance.fr")   # Résolution de datafrance.fr
)

reponse = sr1(requete, timeout= 2, verbose= 0)
if reponse and reponse.haslayer(DNS):
    for i in range(reponse[DNS].ancount):
        print(reponse[DNS].an[i].rdata) # rdata : Response Data