Scanner feito com shell de comandos Linux

Fazendo um simples scanner de portas com comandos nativos do Linux, graças ao pessoal do Command Line Kunk Fu e ao Lanmaster, ficou fácil gerar uma sintaxe para esse fim. Usando o shell de comandos em nível de usuário sem o uso de quaisquer ferramentas.

01 - Vamos criar um arquivo chamado "portas.txt" e "ips.txt" com respectivas portas e ips que desejamos scannear. Isso pode ser feito usando qualquer editor de texto.

$ nano portas.txt
21
22
23
80
443
Ctrl o # para salvar
Ctrl x # para sair

$ nano ips.txt
192.168.1.1
192.168.1.5
192.168.1.10
192.168.1.44
192.168.1.50
192.168.1.102
Ctrl o # para salvar
Ctrl x # para sair

02 - Execute o seguinte comando no shell:
for /F "tokens=*" %j in (ips.txt) do @for /F "tokens=*" %i in (portas.txt) do @((echo open %j %i)&
(echo quit)) | ftp 2>&1 | find "host" && @echo %i is open on %j >> resultado.txt

03 - Veja o resultado:
$ cat resultado.txt
22 is open on 192.168.1.1
443 is open on 192.168.1.10
80 is open on 192.168.1.50
23 is open on 192.168.1.102
443 is open on 192.168.1.102

Cada porta aberta leva 30 segundos para ser concluída e as portas fechadas são instantâneos, mas tudo levar uma quantidade significativa de tempo contra um maquina que não esteja online. Conhecida apenas para IPs ao vivo e sondagem de portas interessantes. O método acima só funciona em XP, 2003 e Windows 7, e não Vista. Vista não não reposta suas informações para a saída padrão ou erro padrão, então você não pode chegar aos dados para analisá-lo. No entanto, eu vim acima com uma solução. Use o seguinte comando:

for /F "tokens=*" %j in (ips.txt) do @for /F "tokens=*" %i in (ports.txt) do
@echo %j:%i & ((echo open %j %i)&(echo quit)) | ftp

Você verá algo parecido com isto:
192.168.1.1:22
Connection closed by remote host.
192.168.1.1:80
> ftp: connect :Connection refused
192.168.1.1:443
Connection closed by remote host.
192.168.1.50:22
> ftp: connect :Connection refused
192.168.1.50:80
Connection closed by remote host.
192.168.1.50:443
> ftp: connect :Connection refused

Qualquer momento ele diz "Conexão fechada pelo host remoto." Isso significa que a porta estava aberta e expirou.

Pesquisando shell c99 no "google"

safe-mode: off (not secure) drwxrwxrwx c99shell
 inurl:c99.php
 inurl:c99.php uid=0(root)
 root c99.php
 "Captain Crunch Security Team" inurl:c99
 download c99.php
 download c99.php
 download c99.php
 inurl:c99.php
 inurl:c99.php
 allinurl: c99.php
 inurl:c99.php
 allinurl: c99.php
 inurl:"/c99.php"
 allinurl: c99.php
 inurl:c99.php
 inurl:"c99.php" c99shell
  inurl:c99.php uid=0(root)
  c99shell powered by admin
  c99shell powered by admin
 inurl:"/c99.php"
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 c99 shell v.1.0 (roots)
 inurl:c99.php
 allintitle: "c99shell"
 inurl:"c99.php
 inurl:"c99.php
 allinurl: "c99.php"
 inurl:c99.php
 intitle:C99Shell v. 1.0 pre-release +uname
 intitle:C99Shell v. 1.0 pre-release +uname
 allinurl: "c99.php"
 inurl:c99.php
 inurl:"c99.php"
 inurl:"c99.php"
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:"c99.php" c99shell
 inurl:c99.php
 inurl:"c99.php"
 allinurl:c99.php
 inurl:"/c99.php
 inurl:c99.php?
 inurl:/c99.php+uname
 allinurl:"c99.php"
 allinurl:c99.php
 inurl:"c99.php"
 inurl:"c99.php"
 allinurl:c99.php
 allinurl:c99.php?
 allinurl:c99.php?
 allinurl:c99.php?
 "inurl:c99..php"
 allinurl:c99.php
  c99shell [file on secure ok ]?
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
  powered by Captain Crunch Security Team
 allinurl:c99.php
 "c99.php" filetype:php
 allinurl:c99.php
 inurl:c99.php
 allinurl:.c99.php
 "inurl:c99.php"
 c99. PHP-code Feedback Self remove
 allinurl:c99.php
 download c99.php
 allinurl:c99.php
 inurl:c99.php
 allinurl: "c99.php"
 allinurl:c99.php
 allinurl:c99.php
 c99shell
 inurl:c99.php
 inurl:c99.php
 intitle:C99Shell v. 1.0 pre-release +uname
 allinurl:"c99.php"
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 inurl:c99.php
 safe-mode: off (not secure) drwxrwxrwx c99shell
 inurl:/c99.php
 inurl:"c99.php"
 inurl:c99.php
 inurl:c99.php
 c99.php download
  inurl:c99.php
 inurl:"c99.php"
 inurl:/c99.php
 inurl:"c99.php?"
 inurl:c99.php
 inurl:c99.php
 files/c99.php
 c99shell filetype:php -echo
 c99shell powered by admin
 inurl:c99.php
 inurl:c99.php
 inurl:"c99.php"
 inurl:c99.php uid=0(root)
 allinurl:c99.php
 inurl:"c99.php"
 inurl:"c99.php"
 inurl:"/c99.php" intitle:"C99shell"
 inurl:"/c99.php" intitle:"C99shell"
 inurl:"/c99.php" intitle:"C99shell"
 C99Shell v. 1.0 pre-release build #5
 inurl:c99.php
 inurl:c99.php
 --[ c99shell v. 1.0 pre-release build #16
 c99shell linux infong
 c99shell linux infong
 C99Shell v. 1.0 pre-release build
 !C99Shell v. 1.0 beta!
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 !c99shell v. 1+Safe-mode: OFF (not secure)
 "C99Shell v. 1.0 pre-release build "
 intitle:c99shell +filetype:php
 inurl:c99.php
 intitle:C99Shell v. 1.0 pre-release +uname
 "Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 intitle:!C99Shell v. 1.0 pre-release build #16! root
 !C99Shell v. 1.0 pre-release build #5!
 inurl:"c99.php"
 C99Shell v. 1.0 pre-release build #16!
 c99shell v. 1.0 pre-release build #16
 intitle:c99shell intext:uname
 allintext:C99Shell v. 1.0 pre-release build #12
 c99shell v. 1.0 pre-release build #16
 --[ c99shell v. 1.0 pre-release build #15 | Powered by ]--
 allinurl: "c99.php"
 allinurl: "c99.php"
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 "c99shell v 1.0"
 ftp apache inurl:c99.php
 c99shell+v.+1.0 16
 C99Shell v. 1.0 pre-release build #16 download
 intitle:c99shell "Software: Apache"
 allinurl: c99.php
 allintext: Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove

Logout
 powered by Captain Crunch Security Team
 powered by Captain Crunch Security Team
 !C99Shell v. 1.0 pre-release build #5!
 c99shell v. 1.0 release security
 c99shell v. 1.0 pre-release build
 inurl:c99.php
 c99shell [file on secure ok ]?
 C99Shell v. 1.3
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 inurl:c99.php uid=0(root)
  powered by Captain Crunch Security Team
 C99Shell v. 1.0 pre-release build #16
 c99shell[on file]ok
 c99shell[file on ]ok
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 inurl:c99.php
 "C99Shell v. 1.0 pre"
 =C99Shell v. 1.0 pre-release
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 c99shell v. pre-release build
 inurl:c99.php c99 shell
 inurl:c99.php c99 shell
 powered by Captain Crunch Security Team
 inurl:c99.php
 inurl:c99.php
 !C99Shell v. 1.0 pre-release build #5!
 intitle:"c99shell" filetype:php root
 intitle:"c99shell" Linux infong 2.4
 C99Shell v. 1.0 beta !
 C99Shell v. 1.0 pre-release build #
 inurl:"c99.php"
 allintext:C99Shell v. 1.0 pre-release build #12
 "C99Shell v. 1.0 pre"
 powered by Captain Crunch Security Team
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 inurl:/c99.php?
 allinurl:c99.php
 intitle:C99Shell pre-release
 inurl:"c99.php"
 powered by Captain Crunch Security Team
 inurl:c99.php
 C99Shell v. 1.0 pre-release build #16!
 allinurl:c99.php
 C99Shell v. 1.0 pre-release build #16 administrator
 intitle:c99shell filetype:php
 powered by Captain Crunch Security Team
 powered by Captain Crunch Security Team
 C99Shell v. 1.0 pre-release build #12
 c99shell v.1.0
 allinurl:c99.php
 "c99shell v. 1.0 pre-release build"
 inurl:"c99.php" filetype:php
 "c99shell v. 1.0 "
 ok c99.php
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
  c99shell v. 1.0 pre-release build #16 |
 !C99Shell v. 1.0 pre-release build #5!
 !C99Shell v. 1.0 pre-release build #5!
 allinurl:/c99.php
 powered by Captain Crunch Security Team
 inurl:c99.php
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 inurl:c99.php
 powered by Captain Crunch Security Team
 inurl:c99.php
 C99Shell v. 1.0 pre-release
 inurl:c99.php
 inurl:c99.php ext:php
 inurl:"c99.php"
 allinurl:"c99.php"
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 powered by Captain Crunch Security Team
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout"
 C99Shell v. 1.0 pre-release build #16 software apache
  Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 "c99shell v 1.0"
 inurl:"c99.php"
 allintitle: C99shell filetype:php
 C99Shell v. 1.0 pre-release build #16!
 "c99shell v. 1.0 pre-release"
 c99shell v. 1.0 pre-release build #5
 allinurl:"c99.php" filetype:php
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 !C99Shell v. 1.0 pre-release build #16!
 inurl:c99.php
 intitle:C99Shell v. 1.0 pre-release +uname
 inurl:c99.php
 c99shell v. 1.0
 allinurl: c99.php
  --[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | ]--
 inurl:"/c99.php"
 c99shell +uname
 c99shell php + uname
 c99shell php + uname
 --[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | ]--
 allinurl:c99.php
 !C99Shell v. 1.0 pre-release build #5!
 C99Shell v.1.0 pre-release
 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout
 inurl:c99.php
 intitle:c99shell filetype:php
 "Encoder Tools Proc. FTP brute"
 "c99" filetype:php intext:"Safe-Mode: OFF"
 c99shell v. 1.0 pre
 inurl:c99.php
 intitle:c99shell uname -bbpress
intitle:"index.of" c99.php
 inurl:admin/files/
 intitle:"index of /" "c99.php"
 intitle:"index of" intext:c99.php
 intitle:index.of c99.php
 intitle:"index of" + c99.php
 intitle:index/of file c99.php
 intitle:index/of file c99.php
 index of /admin/files/
 intitle:"Index of/"+c99.php
 c99.php "intitle:Index of "
 c99.php "intitle:Index of "
 c99.php "intitle:Index of "
 intitle:index.of c99.php
 img/c99.php
 intitle:index.of c99.php
  img.c99.php
 intitle:"Index of/"+c99.php
 "index of /" c99.php
 c99.php
 intitle:"Index of" c99.php
 "index of" c99.php
 "Index of/"+c99.php


Conteúdo destinado apenas para estudos!

Shell script php

Alguns shell scripts em php, divirtam-se.

Nomes:
120667kk.php.pjpeg
420532Shell.php.pjpeg
629788tryag.php
681985c99.php
951078biJ.php
c99.php
joomla.php
mm.php
Mohajer22-perl.pl
O0O.php
perl.pl
sql.php
style.php
sym4.php
Team SQL.php
TrYaG.php
update.php

Baixar: http://www.4shared.com/file/uDgWw-cG/scripts.html