powershell .\Invoke-Portscan.ps1 -Hosts 192.168.1.0/24 -T 4 -ports '445,1433,8080,3389,80' -oA c:\windows\temp\res.txt

powershell .\Invoke-Portscan.ps1  # 調(diào)用PowerShell端口掃描腳本
-Hosts 192.168.1.0/24             # 掃描目標(biāo)：整個C類網(wǎng)段（256個IP）
-T 4                              # 線程數(shù)：4個并發(fā)線程
-ports '445,1433,8080,3389,80'   # 目標(biāo)端口：關(guān)鍵服務(wù)端口
-oA c:\windows\temp\res.txt       # 輸出參數(shù)：指定輸出格式和路徑

<!-- res.txt.xml 示例片段 -->
<host starttime="1723123456" endtime="1723123567">
    <address addr="192.168.1.1" addrtype="ipv4"/>
    <ports>
        <port protocol="tcp" portid="80">
            <state state="open" reason="syn-ack" reason_ttl="64"/>
            <service name="http" method="table" conf="3"/>
        </port>
    </ports>
</host>

# res.txt.nmap 示例片段
Nmap scan report for 192.168.1.1
Host is up (0.045s latency).

PORT     STATE SERVICE
80/tcp   open  http
445/tcp  open  microsoft-ds
3389/tcp open  ms-wbt-server

# res.txt.gnmap 示例片段
Host: 192.168.1.1 () Ports: 80/open/tcp//http///, 445/open/tcp//microsoft-ds///, 
3389/open/tcp//ms-wbt-server///

powershell .\Invoke-Portscan.ps1 -Hosts 192.168.1.0/24 -T 4 -ports '445,1433,8080,3389,80' -oN c:\windows\temp\res.txt

# 查看完整幫助信息
Get-Help .\Invoke-Portscan.ps1 -full

# 或使用腳本自身的幫助參數(shù)
.\Invoke-Portscan.ps1 -?
.\Invoke-Portscan.ps1 -Help

# 方法1：直接重命名nmap格式文件
Copy-Item "c:\windows\temp\res.txt.nmap" "c:\windows\temp\res.txt"

# 方法2：合并所有輸出文件
Get-Content "c:\windows\temp\res.txt.*" | Set-Content "c:\windows\temp\combined_res.txt"

# 方法3：選擇性提取關(guān)鍵信息
Select-String -Path "c:\windows\temp\res.txt.nmap" -Pattern "open" | 
    ForEach-Object { $_.Line } | 
    Set-Content "c:\windows\temp\open_ports.txt"

# 單IP多端口掃描函數(shù)
function Invoke-SimplePortScan {
    param(
        [string]$Target = "192.168.1.1",
        [array]$Ports = @(445, 1433, 8080, 3389, 80),
        [string]$OutputPath = "c:\windows\temp\res.txt"
    )
    
    # 清空或創(chuàng)建輸出文件
    "" | Set-Content $OutputPath
    
    foreach ($port in $Ports) {
        Write-Host "掃描 $Target 端口 $port ..." -ForegroundColor Yellow
        $result = Test-NetConnection -ComputerName $Target -Port $port -WarningAction SilentlyContinue
        
        if ($result.TcpTestSucceeded) {
            $message = "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $Target 端口 $port 開放"
            Write-Host $message -ForegroundColor Green
            $message | Add-Content $OutputPath
        }
    }
}

# 掃描整個網(wǎng)段
function Invoke-NetworkPortScan {
    param(
        [string]$Network = "192.168.1",
        [array]$Ports = @(445, 1433, 8080, 3389, 80),
        [string]$OutputPath = "c:\windows\temp\res.txt"
    )
    
    "開始網(wǎng)絡(luò)端口掃描: $(Get-Date)" | Set-Content $OutputPath
    
    1..254 | ForEach-Object {
        $targetIP = "$Network.$_"
        foreach ($port in $Ports) {
            $result = Test-NetConnection -ComputerName $targetIP -Port $port -WarningAction SilentlyContinue
            if ($result.TcpTestSucceeded) {
                "$targetIP 端口 $port 開放" | Add-Content $OutputPath
            }
        }
    }
    
    "掃描完成: $(Get-Date)" | Add-Content $OutputPath
}

# 使用示例
Invoke-SimplePortScan -Target "192.168.1.1" -OutputPath "c:\windows\temp\single_scan.txt"

# 重定向標(biāo)準(zhǔn)輸出到文件
.\Invoke-Portscan.ps1 -Hosts 192.168.1.0/24 -T 4 -ports '445,1433,8080,3389,80' > c:\windows\temp\res.txt

# 使用Tee-Object同時查看和保存輸出
.\Invoke-Portscan.ps1 -Hosts 192.168.1.0/24 -T 4 -ports '445,1433,8080,3389,80' | Tee-Object -FilePath c:\windows\temp\res.txt

function Invoke-MyPortScan {
    param(
        [Parameter(Mandatory=$true)]
        [string]$Hosts,
        
        [int]$Threads = 4,
        
        [string]$Ports = "445,1433,8080,3389,80",
        
        [string]$OutputFile = "c:\windows\temp\scan_result.txt"
    )
    
    # 調(diào)用原始掃描腳本
    $result = .\Invoke-Portscan.ps1 -Hosts $Hosts -T $Threads -ports $Ports -oA $OutputFile
    
    # 將nmap格式轉(zhuǎn)換為簡單文本
    if (Test-Path "$OutputFile.nmap") {
        $content = Get-Content "$OutputFile.nmap"
        $simpleResult = $content | Where-Object { $_ -match "(open|filtered|closed)" }
        $simpleResult | Set-Content $OutputFile
    }
    
    return $result
}

# 優(yōu)化的掃描參數(shù)
.\Invoke-Portscan.ps1 `
    -Hosts 192.168.1.0/24 `
    -T 8 `  # 根據(jù)系統(tǒng)資源調(diào)整線程數(shù)
    -ports '445,1433,8080,3389,80' `
    -Delay 100 `  # 添加延遲避免被檢測
    -Timeout 3000 `  # 設(shè)置超時時間
    -oA c:\windows\temp\res.txt

# 統(tǒng)計開放端口數(shù)量
$openPorts = Get-Content "c:\windows\temp\res.txt.nmap" | Select-String "open"
Write-Host "發(fā)現(xiàn) $($openPorts.Count) 個開放端口"

# 提取所有開放端口的IP地址
$ipAddresses = Get-Content "c:\windows\temp\res.txt.nmap" | 
    Select-String "Nmap scan report for" | 
    ForEach-Object { $_ -replace "Nmap scan report for ", "" }

# 生成簡易報告
$report = @"
端口掃描結(jié)果報告
生成時間: $(Get-Date)
掃描范圍: 192.168.1.0/24
目標(biāo)端口: 445,1433,8080,3389,80

發(fā)現(xiàn) $($openPorts.Count) 個開放端口
涉及 $($ipAddresses.Count) 臺主機(jī)

詳細(xì)結(jié)果請查看: c:\windows\temp\res.txt.nmap
"@

$report | Set-Content "c:\windows\temp\scan_report.txt"