Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

Untitled

By: a guest on Apr 25th, 2012  |  syntax: Perl  |  size: 7.77 KB  |  hits: 50  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. #       portscan.pl
  2. #      
  3. #       Copyright 2011 madstein <madstein@f0r3ns1cs>
  4. #      
  5. #       This program is free software; you can redistribute it and/or modify
  6. #       it under the terms of the GNU General Public License as published by
  7. #       the Free Software Foundation; either version 2 of the License, or
  8. #       (at your option) any later version.
  9. #      
  10. #       This program is distributed in the hope that it will be useful,
  11. #       but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. #       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13. #       GNU General Public License for more details.
  14. #      
  15. #       You should have received a copy of the GNU General Public License
  16. #       along with this program; if not, write to the Free Software
  17. #       Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  18. #       MA 02110-1301, USA.
  19. #      
  20. #      
  21.  
  22. #!/usr/bin/perl
  23.  
  24. use IO::Socket;
  25. use Term::ANSIColor;
  26. inicio:
  27. print color ("yellow"), "TrojanHunter\n", color ("reset");
  28. print color ("red"), "Target ip \n", color ("reset");
  29. $victim = <stdin>;
  30. chop ($victim);
  31. $timeout = 5;
  32.  
  33.  
  34. print "Scaning Ip:",color ("red")," $victim \n",color("reset");
  35.  
  36. # Trojan Ports...
  37.  
  38. @ports = (   21, 22, 23, 25, 110, 69, 3306, 137, 138, 139, 32418, 777, 10666, 25, 30029, 1999, 5400, 8787, 54320, 1349,
  39.              31337, 31338, 34324, 1042, 20331, 5400, 5401, 5402, 121,
  40.              31666, 2115, 20203, 10607, 3150, 2140, 60000, 6670, 6671,
  41.              6771, 26274, 47262, 6883, 1000, 65000, 1012, 21, 1011, 1010,
  42.              1015, 1016, 12701, 23456, 80, 4567, 5321, 50766, 1492, 12345,
  43.              12346, 6969, 6970, 21544, 21554, 12076, 12223, 31787, 31785,
  44.              2023, 8879, 31, 456, 99, 2283, 7789, 4590, 4950, 5521, 9400,
  45.              6939, 555, 9989, 30999, 13700, 3129, 40421, 40422, 40423,
  46.              40426, 1269, 20000, 20001, 20034, 5031, 5032, 7300, 7301,
  47.              7306, 7307, 7308, 30100, 30101, 30102, 30133, 1033, 31339,
  48.              49301, 5011, 2023, 2801, 3700, 9872, 9873, 9874, 9875, 10067,
  49.              10167, 16969, 11223, 22222, 33333, 1170, 1509, 4000, 1024,
  50.              7000, 53001, 5569, 666, 21544, 4321, 43210, 54321, 11000,
  51.              1600, 1981, 6912, 69123, 1001, 5000, 5001, 50505, 30303,
  52.              1207, 1807, 555, 1170, 2565, 1243, 6711, 6712, 6713, 6776,
  53.              27374, 61466, 2140, 3150, 40412, 6400, 6000, 29891, 34324,
  54.              3791, 2000, 2001, 30133, 33911 , 23456, 1234, 1245, 6669,
  55.              1170, 12361, 12362, 3024, 4092, 5714, 5741, 5742, 2583, 1080,
  56.              5550, 5110, 1234, 5000, 888, 8192, 8080, 1863, 6666, 979, 2000,
  57.              8888, 6500, 2345, 1000, 236, 6198, 4444, 1516, 8079, 513, 22, 6623,
  58.              4672, 96, 8079, 7329, 3000, 2122, 5903, 9999, 2046, 1254, 1863, 5050,
  59.              5100);
  60.  
  61.  
  62.  
  63. @trojans = ("ftp", "ssh", "telnet", "smtp", "Pop3", "Tlftp", "MySql", "Netbios-ns",
  64.             "Netbios-dgm", "Netbios-ssn",
  65.              "Acid Battery 1.0", "AimSpy", "Ambush", "Antigen",
  66.             "AOLTrojan1.1", "Backdoo r, Transscout",
  67.             "BackConstruction 1.2+1.5", "Back Orifice 2000",
  68.             "Back Orifice 2000", "Back Orifice DLL", "Back Orifice",
  69.             "Back Orifice", "BigGluck, TN", "Bla 1.1", "Bla",
  70.             "Blade Runner", "Blade Runner", "Blade Runner",
  71.             "BO Jammerkillah", "BOWhack", "Bugs", "Chupacabra, Logged!",
  72.             "Coma Danny", "Deep Throat 1.0, The Invasor", "Deep Throat 1.0",
  73.             "DeepThroat 2 & 3", "DeepThroat 2 & 3", "DeepThroat 2 & 3",
  74.             "DeepThroat 2.0 & 3.0", "Delta", "Delta", "DeltaSourceDarkStar",
  75.             "Der Spaeher 3", "Devil 1.03", "Doly Trojan", "Possible Doly Trojan 1.1",
  76.             "Doly Trojan 1.1+1.2", "Doly Trojan 1.35", "Doly Trojan 1.5",
  77.             "Doly Trojan 1.6", "Eclipse2000", "Evil FTP-Ugly FTP",
  78.             "Possible Executor", "FileNail Danny", "Firehotcker", "Fore", "FTP99CMP",
  79.             "GabanBus,NetBus", "GabanBus,NetBus", "Gatecrasher",
  80.             "Gatecrasher", "GirlFriend", "GirlFriend", "Gjamer",
  81.             "Hack´99 KeyLogger", "Hack'a'tack", "Hack'a'tack",
  82.             "Hack City Ripper Pro", "Hack Office Armageddon",
  83.             "Hackers Paradise, Masters Paradise", "Hackers Paradise",
  84.             "Hidden port V2.0", "HVL Rat5", "ICKiller", "IcqTrojan",
  85.             "IcqTrojan", "Illusion Mailer", "InCommand 1.0",
  86.             "Indoctrination", "Phase Zero", "InI Killer", "Kuang",
  87.             "Kuang2 The Virus", "Masters Paradise", "Masters Paradise",
  88.             "Masters Paradise", "Masters Paradise", "Masters Paradise",
  89.             "Maverick's Matrix", "Millenium", "Millennium", "NetBus 2 Pro",
  90.             "NetMetropolitan 1.0 & 1.04", "NetMetropolitan 1.04",
  91.             "NetMonitor", "NetMonitor", "NetMonitor", "NetMonitor",
  92.             "NetMonitor", "NetSphere", "NetSphere", "NetSphere",
  93.             "Netsphere Final", "NetSpy", "NetSpy DK", "Online Keylogger",
  94.             "OOTLT", "Pass Ripper", "Phineas Phucker", "Portal of Doom",
  95.             "Portal of Doom", "Portal of Doom", "Portal of Doom",
  96.             "Portal of Doom", "Portal of Doom", "Portal of Doom",
  97.             "Priority", "Progenic trojan", "Prosiak 0.47", "Prosiak",
  98.             "Psyber Streaming Server", "Psyber Streaming Server",
  99.             "Psyber Streaming Server", "Psyber Streaming Server",
  100.             "Remote Grab", "Remote Window Shutdown", "Robo Hack",
  101.             "Satanz Backdoor, Peur de Rien FTP", "Schwindler 1.82",
  102.             "Schoolbus 1.0", "Schoolbus 1.6 & 2.0", "Schoolbus 1.6 & 2.0",
  103.             "Senna Spy", "Shiva Burka", "ShockRave", "Shitheep",
  104.             "Shitheep Danny", "Silencer, WebEx", "Sockets de Troie",
  105.             "Sockets de Troie", "Sockets de Troie", "Socket 25", "SoftWar",
  106.             "Spy Sender", "Stealth Spy", "Streaming Audio Trojan", "Striker",
  107.             "SubSeven", "SubSeven", "SubSeven", "SubSeven", "SubSeven",
  108.             "SubSeven 2.1", "Telecommando", "The Invasor", "The Invasor",
  109.             "The Spy", "The tHing", "The tHing 1.6", "The Unexplained",
  110.             "Tiny Telnet Server", "Total Eclypse 1.0", "Transscout",
  111.             "TrojanCow", "Trojan Spirit 2001a", "Trojan Spirit 2001a",
  112.             "Ugly Ftp", "Ultors Trojan", "Voodoo Doll", "Vampire", "Voice",
  113.             "Whack-a-mole", "Whack-a-mole", "WinCrash", "WinCrash",
  114.             "WinCrash", "WinCrash", "WinCrash", "Wincrash 2",
  115.             "Wingate Socks Proxy", "Xtcp", "ProRat 1.9 Fix2", "SkD RAT 2.0 Beta",
  116.             "Darkviews 1.00", "SpyOne 1.0 Beta", "Radoor 2.0", "MiniShell", "Possible...Not Sure,MsnFunMaker",
  117.             "TGA BackDoor SP2 2.0", "Remote Shell 1.2", "Bifrost Reload 0.0.01", "MyTroyan", "Possible...NotSure YU 3.3",
  118.             "Diablo", "The KamiKrazy", "The KamiKrazy(2)", "The KamiKrazy(3)", "The KamiKrazy(4)",
  119.             "The KamiKrazy(5)", "The KamiKrazy(6)", "Omerta 1.3", "RLogin", "Raw", "ktelnet",
  120.             "Emule p2p", ".97mm 7.1", "Fearless Trojan 1.5", "NetShadow 1.2", "MJCS Trojan",
  121.             "Toquito bandito 1.2 (h)", "TransFile 1.0", "Phantom's remote file manager 1.0",
  122.             "SaTaN 1.0 Lite", "Sun Shadow 1.6x", "Monk 1.0", "MSN Messanger", "Yhaoo Messenger",
  123.             "Yhaoo Msn Webcam");
  124.  
  125.  
  126. for ($z=0;$z<219;$z++) {
  127. $n=0;
  128. $port = @ports[$z];
  129. $trojan = @trojans[$z];
  130. $socket = IO::Socket::INET->new(PeerPort => "$port",
  131.                                  PeerAddr => $victim,
  132.                                  Proto    => "tcp",
  133.                                  Timeout  => $timeout) || $n++;
  134. close $socket;
  135. if ($n == 0) {
  136.    print (" Possible trojan or service open : ",color("red")," $trojan ",color("reset")," on the port ",color("green"), "$port\n",color("reset") );
  137.    $n==0;
  138.    }
  139. }
  140. print "Enter To Restart Program\n";
  141. $restart=<stdin>;
  142. goto inicio ;
create a new version of this paste RAW Paste Data