接上一篇文章，继续对接绿盟的扫描器。

本文为终结篇，暂时不会对该接口进行开发，且该脚本符合程序应用要求。

满足需求使用，且完成目标。

上一篇关于xml的文章

nsf_2.0.py

# -*-coding：utf-8 -*-
# BY WANGCC
# -*-coding：utf-8 -*-
# BY WANGCC

import xml.dom.minidom as minidom
import sys,re

class Nsf_currency:
    task_type='domain'
    os_match = 'yes'
    messtypes='5;6;7;8;9;10;11;12;13;14;15;16;17;18;20;21;22;23;24;25;26;27;28'
    isguesspwd='no'
    port_strategy='user'
    port_speed='3'
    port_tcp='T'
    port_udp='yes'
    live='yes'
    live_icmp='yes'
    live_udp='no'
    live_tcp='yes'
    live_tcp_ports='21,22,23,25,80,443,445,139,3389,6000'
    scan_level='3'
    timeout_plugins='40'
    timeout_read='5'
    enable_unsafe_plugins='no'
    scan_alert='yes'
    alert_msg=''
    scan_huawei='no'
    check_addtional='no'
    scan_oracle='yes'
    ifdebug='no'
    encoding='UTF-8'

class Nsf_conf(Nsf_currency):
    def __init__(self,targets, port_strategy_userports):
        self.targets=targets
        self.port_strategy_userports=port_strategy_userports


def create_tree(argv):
    ip_list=argv[1]
    ports=argv[2]
    task_xml=argv[3]
    task_name=argv[4]
    dom = minidom.getDOMImplementation().createDocument(None, 'config', None)
    root = dom.documentElement
    employee = dom.createElement('server')
    root.appendChild(employee)

    targets = dom.createElement('targets')
    targets.appendChild(dom.createTextNode('\n\t'))
    root.appendChild(targets)
    report = dom.createElement('report')
    report.appendChild(dom.createTextNode('\n\t'))
    root.appendChild(report)
    pwdguess = dom.createElement('pwdguess')
    pwdguess.appendChild(dom.createTextNode('\n\t'))
    root.appendChild(pwdguess)
    #----------------
    taskname = dom.createElement('taskname')
    taskname.appendChild(dom.createCDATASection(task_name))
    root.appendChild(taskname)
    #--------------------plugin_template_id
    plugin_template_id = dom.createElement('plugin_template_id')
    plugin_template_id.appendChild(dom.createTextNode('0'))
    root.appendChild(plugin_template_id)
    #---------------------
    scanpri = dom.createElement('scanpri')
    scanpri.appendChild(dom.createTextNode('2'))
    root.appendChild(scanpri)

    def dom_createE(name, value):
        element = dom.createElement('key')
        element.setAttribute('name', name)
        element.setAttribute('value', value)
        employee.appendChild(element)
        return

    def writeInfoToXml(object,task_xml):
        # 内容参数
        dom_createE(name='task_type', value=Nsf_currency.task_type)
        dom_createE(name='targets', value=object.targets)
        dom_createE(name='os_match', value=object.os_match)
        dom_createE(name='messtypes', value=object.messtypes)
        dom_createE(name='isguesspwd', value=object.isguesspwd)
        dom_createE(name='port_strategy', value=object.port_strategy)
        dom_createE(name='port_strategy_userports', value=object.port_strategy_userports)
        dom_createE(name='port_speed', value=object.port_speed)
        dom_createE(name='port_tcp', value=object.port_tcp)
        dom_createE(name='port_udp', value=object.port_udp)
        dom_createE(name='live', value=object.live)
        dom_createE(name='live_icmp', value=object.live_icmp)
        dom_createE(name='live_udp', value=object.live_udp)
        dom_createE(name='live_tcp', value=object.live_tcp)
        dom_createE(name='live_tcp_ports', value=object.live_tcp_ports)
        dom_createE(name='scan_level', value=object.scan_level)
        dom_createE(name='timeout_plugins', value=object.timeout_plugins)
        dom_createE(name='timeout_read', value=object.timeout_read)
        dom_createE(name='enable_unsafe_plugins', value=object.enable_unsafe_plugins)
        dom_createE(name='scan_alert', value=object.scan_alert)
        dom_createE(name='scan_huawei', value=object.scan_huawei)
        dom_createE(name='check_addtional', value=object.check_addtional)
        dom_createE(name='scan_oracle', value=object.scan_oracle)
        dom_createE(name='ifdebug', value=object.ifdebug)
        dom_createE(name='encoding', value=object.encoding)

    def Before_execution(ip_list, ports, task_xml):
        print('进入Before_execution')
        object = Nsf_conf(ip_list, ports)
        writeInfoToXml(object, task_xml)
        if task_xml:
            print(task_xml + '生成成功')
        else:
            exit('发生错误')

    Before_execution(ip_list, ports, task_xml)
    with open(task_xml, 'w', encoding='utf-8') as f:
        dom.writexml(f, addindent='\t', newl='\n', encoding='utf-8')




def Verification(argv):
    compile_ip = re.compile('^((25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(25[0-5]|2[0-4]\d|[01]?\d\d?)$')
    if compile_ip.match(argv[1]) and re.search('[a-z]',argv[2]) is None:
        pass
    else:
        print('python nsf_class.py [ip] [ports] [task_xml] [task_name]' )
        exit('参数不合规')


def main():
    if len(sys.argv)==5:
        Verification(sys.argv)
        create_tree(sys.argv)
    else:
        exit('参数不足')
main()

调用文件

# -*-coding：utf-8 -*-
# BY WANGCC

import pycurl
import StringIO
import urllib
import os,sys



##########参数部分，需要根据实际情况修改##########
# 接口IP
host = '192.168.1.2'

# 全局参数配置
username = 'user'
password = 'mypassword'
result_format = 'xml'

# 请求参数（POST）
# XML路径
config_xml = sys.argv[3]
# 任务类型
task_type = '1'
#外部脚本

ip_list = sys.argv[1]
ports = sys.argv[2]
task_xml = sys.argv[3]
task_name = sys.argv[4]

os.system("python nsf_2.py ip_list ports  task_xml task_name")


# https://{device_ip}/api/{api_name}?{query_string}
url = 'https://' + host + '/api/task/create?username=' + username + '&password=' + password + '&format=' + result_format

io = StringIO.StringIO()
curl = pycurl.Curl()
curl.setopt(pycurl.URL,url)
curl.setopt(pycurl.WRITEFUNCTION, io.write)
curl.setopt(pycurl.SSL_VERIFYPEER, 0)
curl.setopt(pycurl.SSL_VERIFYHOST, 0)

# POST请求参数type和config_xml
curl.setopt(pycurl.HTTPPOST, [('config_xml',(curl.FORM_FILE, config_xml)),
                              ('type',(curl.FORM_CONTENTS, task_type)),
                  ])
curl.perform()
ret = io.getvalue()

print(ret)

io.close()
curl.close()

写在后面，虽然因为种种原因吧，虽然测试通过了，但是没有在生产系统使用，但是也是一次真实的体验。
从侧面透露出了基本功的掌握不扎实，对类与对象的理解不够深入、透彻，人生中所有付出的汗水，都将是驱人奋进的力量！