Added lot of junk laying around on harvie.cz

[mirrors/Programs.git] / php / skripty / bdscan.php

diff --git a/php/skripty/bdscan.php b/php/skripty/bdscan.php
new file mode 100644 (file)
index 0000000..c91d096
--- /dev/null
+++ b/php/skripty/bdscan.php
@@ -0,0 +1,83 @@
+#!/usr/bin/php\r
+<?php\r
+//BDScan\r
+//Harvie 2oo7\r
+\r
+///SETTINGS////////////////////////////////////////////\r
+$host = "localhost";\r
+//$host = "192.168.2.1";\r
+$timeout = 0.9;\r
+\r
+if(isset($argv[1])) $host = $argv[1]; //Host\r
+if(isset($argv[2])) $timeout = $argv[2]; //Timeout\r
+\r
+///PORTLIST////////////////////////////////////////////\r
+$ports = array (\r
+//#PORT => "CLASS.Name",\r
+  21    => "SRV.FTP Service",\r
+  22    => "SRV.Secure Shell Service",\r
+  23    => "SRV.Telnet Service",\r
+  24    => "BD.Harvie's NetCat BackDoor",\r
+  80    => "SRV.HTTP Service",\r
+  8080  => "SRV.HTTP Service",\r
+  \r
+  113   => "WRM.Korgo.F",\r
+  903   => "BD.NetDevil",\r
+  1080  => "WRM.MyDoom.B, MyDoom.F, MyDoom.G, MyDoom.H",\r
+  2283  => "WRM.Dumaru.Y",\r
+  2535  => "WRM.Beagle.W, Beagle.X, other Beagle/Bagle variants",\r
+  2745  => "WRM.Bagle",\r
+  3067  => "WRM.Korgo.F",\r
+  3127  => "WRM.My_Doom.A",\r
+  3128  => "WRM.MyDoom.B",\r
+  3140  => "BD.OptixPro.13 and variants",\r
+  5554  => "WRM.Sasser through Sasser.C, Sasser.F",\r
+  6129  => "RM.DameWare",\r
+  8866  => "WRMBeagle.B",\r
+  9898  => "WRM.Dabber.A and Dabber.B",\r
+  9996  => "WRM.Sasser",\r
+  10000 => "WRM.Dumaru.Y",\r
+  10080 => "WRM.MyDoom.B",\r
+  12345 => "BD.NetBus",\r
+  16661 => "BD.HaxDoor",\r
+  17300 => "BD.Kuang, Kuang2",\r
+  27347 => "BD.SubSeven",\r
+  27374 => "BD.SubSeven",\r
+  65506 => "BOT.PhatBot, Agobot, Gaobot"\r
+  );\r
+\r
+///SCAN///////////////////////////////////////////////////////\r
+echo("Harvie's BackDoor PortScanner\n");\r
+echo("[u] Usage: bdscan [host] [timeout]\n");\r
+echo("[i] Timeout is set to $timeout s\n");\r
+echo("[i] Scanning $host for backdoors and basic services...\n\n");\r
+\r
+foreach($ports as $port => $bd) {\r
+  $sock = @pfsockopen($host, $port, $errno, $err, $timeout);\r
+  if($sock) {\r
+    echo("[!] $port : $bd\n");\r
+    $found = true;\r
+  } else {\r
+    //echo("[-] $port : $bd\n");\r
+  }\r
+}\r
+\r
+if(isset($found)) {\r
+  echo("\n[!] Services listed above found...\n");\r
+} else {\r
+  echo("[i] No BackDoors/services found...\n");\r
+}\r
+echo("[i] Finished...\n");\r
+\r
+///SUX_PARSER/////////////////////////////////////////////////\r
+/*\r
+$fp = fopen("bdports.txt", "r");\r
+while(!feof($fp)) {\r
+  $line = trim(fgets($fp));\r
+  $line = explode("\t", $line, 2);\r
+  $line[0] = trim($line[0]);\r
+  $line[1] = trim($line[1]);\r
+  //print_r($line);\r
+  echo("  ".$line[0]." => \"".$line[1]."\",\r\n");\r
+}\r
+*/\r