Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/perl
- use IO::Socket;
- use Term::ANSIColor;
- inicio:
- print color ("yellow"), "TrojanHunter\n", color ("reset");
- print color ("red"), "Target ip \n", color ("reset");
- $victim = <stdin>;
- chop ($victim);
- $timeout = 5;
- print "Scaning Ip:",color ("red")," $victim \n",color("reset");
- # Trojan Ports...
- @ports = ( 21, 22, 23, 25, 110, 69, 3306, 137, 138, 139, 32418, 777, 10666, 25, 30029, 1999, 5400, 8787, 54320, 1349,
- 31337, 31338, 34324, 1042, 20331, 5400, 5401, 5402, 121,
- 31666, 2115, 20203, 10607, 3150, 2140, 60000, 6670, 6671,
- 6771, 26274, 47262, 6883, 1000, 65000, 1012, 21, 1011, 1010,
- 1015, 1016, 12701, 23456, 80, 4567, 5321, 50766, 1492, 12345,
- 12346, 6969, 6970, 21544, 21554, 12076, 12223, 31787, 31785,
- 2023, 8879, 31, 456, 99, 2283, 7789, 4590, 4950, 5521, 9400,
- 6939, 555, 9989, 30999, 13700, 3129, 40421, 40422, 40423,
- 40426, 1269, 20000, 20001, 20034, 5031, 5032, 7300, 7301,
- 7306, 7307, 7308, 30100, 30101, 30102, 30133, 1033, 31339,
- 49301, 5011, 2023, 2801, 3700, 9872, 9873, 9874, 9875, 10067,
- 10167, 16969, 11223, 22222, 33333, 1170, 1509, 4000, 1024,
- 7000, 53001, 5569, 666, 21544, 4321, 43210, 54321, 11000,
- 1600, 1981, 6912, 69123, 1001, 5000, 5001, 50505, 30303,
- 1207, 1807, 555, 1170, 2565, 1243, 6711, 6712, 6713, 6776,
- 27374, 61466, 2140, 3150, 40412, 6400, 6000, 29891, 34324,
- 3791, 2000, 2001, 30133, 33911 , 23456, 1234, 1245, 6669,
- 1170, 12361, 12362, 3024, 4092, 5714, 5741, 5742, 2583, 1080,
- 5550, 5110, 1234, 5000, 888, 8192, 8080, 1863, 6666, 979, 2000,
- 8888, 6500, 2345, 1000, 236, 6198, 4444, 1516, 8079, 513, 22, 6623,
- 4672, 96, 8079, 7329, 3000, 2122, 5903, 9999, 2046, 1254, 1863, 5050,
- 5100);
- @trojans = ("ftp", "ssh", "telnet", "smtp", "Pop3", "Tlftp", "MySql", "Netbios-ns",
- "Netbios-dgm", "Netbios-ssn",
- "Acid Battery 1.0", "AimSpy", "Ambush", "Antigen",
- "AOLTrojan1.1", "Backdoo r, Transscout",
- "BackConstruction 1.2+1.5", "Back Orifice 2000",
- "Back Orifice 2000", "Back Orifice DLL", "Back Orifice",
- "Back Orifice", "BigGluck, TN", "Bla 1.1", "Bla",
- "Blade Runner", "Blade Runner", "Blade Runner",
- "BO Jammerkillah", "BOWhack", "Bugs", "Chupacabra, Logged!",
- "Coma Danny", "Deep Throat 1.0, The Invasor", "Deep Throat 1.0",
- "DeepThroat 2 & 3", "DeepThroat 2 & 3", "DeepThroat 2 & 3",
- "DeepThroat 2.0 & 3.0", "Delta", "Delta", "DeltaSourceDarkStar",
- "Der Spaeher 3", "Devil 1.03", "Doly Trojan", "Possible Doly Trojan 1.1",
- "Doly Trojan 1.1+1.2", "Doly Trojan 1.35", "Doly Trojan 1.5",
- "Doly Trojan 1.6", "Eclipse2000", "Evil FTP-Ugly FTP",
- "Possible Executor", "FileNail Danny", "Firehotcker", "Fore", "FTP99CMP",
- "GabanBus,NetBus", "GabanBus,NetBus", "Gatecrasher",
- "Gatecrasher", "GirlFriend", "GirlFriend", "Gjamer",
- "HackĀ“99 KeyLogger", "Hack'a'tack", "Hack'a'tack",
- "Hack City Ripper Pro", "Hack Office Armageddon",
- "Hackers Paradise, Masters Paradise", "Hackers Paradise",
- "Hidden port V2.0", "HVL Rat5", "ICKiller", "IcqTrojan",
- "IcqTrojan", "Illusion Mailer", "InCommand 1.0",
- "Indoctrination", "Phase Zero", "InI Killer", "Kuang",
- "Kuang2 The Virus", "Masters Paradise", "Masters Paradise",
- "Masters Paradise", "Masters Paradise", "Masters Paradise",
- "Maverick's Matrix", "Millenium", "Millennium", "NetBus 2 Pro",
- "NetMetropolitan 1.0 & 1.04", "NetMetropolitan 1.04",
- "NetMonitor", "NetMonitor", "NetMonitor", "NetMonitor",
- "NetMonitor", "NetSphere", "NetSphere", "NetSphere",
- "Netsphere Final", "NetSpy", "NetSpy DK", "Online Keylogger",
- "OOTLT", "Pass Ripper", "Phineas Phucker", "Portal of Doom",
- "Portal of Doom", "Portal of Doom", "Portal of Doom",
- "Portal of Doom", "Portal of Doom", "Portal of Doom",
- "Priority", "Progenic trojan", "Prosiak 0.47", "Prosiak",
- "Psyber Streaming Server", "Psyber Streaming Server",
- "Psyber Streaming Server", "Psyber Streaming Server",
- "Remote Grab", "Remote Window Shutdown", "Robo Hack",
- "Satanz Backdoor, Peur de Rien FTP", "Schwindler 1.82",
- "Schoolbus 1.0", "Schoolbus 1.6 & 2.0", "Schoolbus 1.6 & 2.0",
- "Senna Spy", "Shiva Burka", "ShockRave", "Shitheep",
- "Shitheep Danny", "Silencer, WebEx", "Sockets de Troie",
- "Sockets de Troie", "Sockets de Troie", "Socket 25", "SoftWar",
- "Spy Sender", "Stealth Spy", "Streaming Audio Trojan", "Striker",
- "SubSeven", "SubSeven", "SubSeven", "SubSeven", "SubSeven",
- "SubSeven 2.1", "Telecommando", "The Invasor", "The Invasor",
- "The Spy", "The tHing", "The tHing 1.6", "The Unexplained",
- "Tiny Telnet Server", "Total Eclypse 1.0", "Transscout",
- "TrojanCow", "Trojan Spirit 2001a", "Trojan Spirit 2001a",
- "Ugly Ftp", "Ultors Trojan", "Voodoo Doll", "Vampire", "Voice",
- "Whack-a-mole", "Whack-a-mole", "WinCrash", "WinCrash",
- "WinCrash", "WinCrash", "WinCrash", "Wincrash 2",
- "Wingate Socks Proxy", "Xtcp", "ProRat 1.9 Fix2", "SkD RAT 2.0 Beta",
- "Darkviews 1.00", "SpyOne 1.0 Beta", "Radoor 2.0", "MiniShell", "Possible...Not Sure,MsnFunMaker",
- "TGA BackDoor SP2 2.0", "Remote Shell 1.2", "Bifrost Reload 0.0.01", "MyTroyan", "Possible...NotSure YU 3.3",
- "Diablo", "The KamiKrazy", "The KamiKrazy(2)", "The KamiKrazy(3)", "The KamiKrazy(4)",
- "The KamiKrazy(5)", "The KamiKrazy(6)", "Omerta 1.3", "RLogin", "Raw", "ktelnet",
- "Emule p2p", ".97mm 7.1", "Fearless Trojan 1.5", "NetShadow 1.2", "MJCS Trojan",
- "Toquito bandito 1.2 (h)", "TransFile 1.0", "Phantom's remote file manager 1.0",
- "SaTaN 1.0 Lite", "Sun Shadow 1.6x", "Monk 1.0", "MSN Messanger", "Yhaoo Messenger",
- "Yhaoo Msn Webcam");
- for ($z=0;$z<219;$z++) {
- $n=0;
- $port = @ports[$z];
- $trojan = @trojans[$z];
- $socket = IO::Socket::INET->new(PeerPort => "$port",
- PeerAddr => $victim,
- Proto => "tcp",
- Timeout => $timeout) || $n++;
- close $socket;
- if ($n == 0) {
- print (" Possible trojan or service open : ",color("red")," $trojan ",color("reset")," on the port ",color("green"), "$port\n",color("reset") );
- $n==0;
- }
- }
- print "Enter To Restart Program\n";
- $restart=<stdin>;
- goto inicio ;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement