Perl Portscanner

[W4rlock]

ESCANEADOR DE PUERTOS CON BASE DE DATOS PARA PODER DECIRTE SI TIENES TROYANOS EN EL PC

>22.#!/usr/bin/perl
23. 
24.use IO::Socket;
25.use Term::ANSIColor;
26.inicio:
27.print color ("yellow"), "TrojanHunter\n", color ("reset");
28.print color ("red"), "Target ip \n", color ("reset");
29.$victim = ;
30.chop ($victim);
31.$timeout = 5;
32. 
33. 
34.print "Scaning Ip:",color ("red")," $victim \n",color("reset");
35. 
36.# Trojan Ports...
37. 
38.@ports = (   21, 22, 23, 25, 110, 69, 3306, 137, 138, 139, 32418, 777, 10666, 25, 30029, 1999, 5400, 8787, 54320, 1349,
39.             31337, 31338, 34324, 1042, 20331, 5400, 5401, 5402, 121,
40.             31666, 2115, 20203, 10607, 3150, 2140, 60000, 6670, 6671,
41.             6771, 26274, 47262, 6883, 1000, 65000, 1012, 21, 1011, 1010,
42.             1015, 1016, 12701, 23456, 80, 4567, 5321, 50766, 1492, 12345,
43.             12346, 6969, 6970, 21544, 21554, 12076, 12223, 31787, 31785,
44.             2023, 8879, 31, 456, 99, 2283, 7789, 4590, 4950, 5521, 9400,
45.             6939, 555, 9989, 30999, 13700, 3129, 40421, 40422, 40423,
46.             40426, 1269, 20000, 20001, 20034, 5031, 5032, 7300, 7301,
47.             7306, 7307, 7308, 30100, 30101, 30102, 30133, 1033, 31339,
48.             49301, 5011, 2023, 2801, 3700, 9872, 9873, 9874, 9875, 10067,
49.             10167, 16969, 11223, 22222, 33333, 1170, 1509, 4000, 1024,
50.             7000, 53001, 5569, 666, 21544, 4321, 43210, 54321, 11000,
51.             1600, 1981, 6912, 69123, 1001, 5000, 5001, 50505, 30303,
52.             1207, 1807, 555, 1170, 2565, 1243, 6711, 6712, 6713, 6776,
53.             27374, 61466, 2140, 3150, 40412, 6400, 6000, 29891, 34324,
54.             3791, 2000, 2001, 30133, 33911 , 23456, 1234, 1245, 6669,
55.             1170, 12361, 12362, 3024, 4092, 5714, 5741, 5742, 2583, 1080,
56.             5550, 5110, 1234, 5000, 888, 8192, 8080, 1863, 6666, 979, 2000,
57.             8888, 6500, 2345, 1000, 236, 6198, 4444, 1516, 8079, 513, 22, 6623,
58.             4672, 96, 8079, 7329, 3000, 2122, 5903, 9999, 2046, 1254, 1863, 5050,
59.             5100);
60. 
61. 
62. 
63.@trojans = ("ftp", "ssh", "telnet", "smtp", "Pop3", "Tlftp", "MySql", "Netbios-ns",
64.            "Netbios-dgm", "Netbios-ssn",
65.             "Acid Battery 1.0", "AimSpy", "Ambush", "Antigen",
66.            "AOLTrojan1.1", "Backdoo r, Transscout",
67.            "BackConstruction 1.2+1.5", "Back Orifice 2000",
68.            "Back Orifice 2000", "Back Orifice DLL", "Back Orifice",
69.            "Back Orifice", "BigGluck, TN", "Bla 1.1", "Bla",
70.            "Blade Runner", "Blade Runner", "Blade Runner",
71.            "BO Jammerkillah", "BOWhack", "Bugs", "Chupacabra, Logged!",
72.            "Coma Danny", "Deep Throat 1.0, The Invasor", "Deep Throat 1.0",
73.            "DeepThroat 2 & 3", "DeepThroat 2 & 3", "DeepThroat 2 & 3",
74.            "DeepThroat 2.0 & 3.0", "Delta", "Delta", "DeltaSourceDarkStar",
75.            "Der Spaeher 3", "Devil 1.03", "Doly Trojan", "Possible Doly Trojan 1.1",
76.            "Doly Trojan 1.1+1.2", "Doly Trojan 1.35", "Doly Trojan 1.5",
77.            "Doly Trojan 1.6", "Eclipse2000", "Evil FTP-Ugly FTP",
78.            "Possible Executor", "FileNail Danny", "Firehotcker", "Fore", "FTP99CMP",
79.            "GabanBus,NetBus", "GabanBus,NetBus", "Gatecrasher",
80.            "Gatecrasher", "GirlFriend", "GirlFriend", "Gjamer",
81.            "Hack´99 KeyLogger", "Hack'a'tack", "Hack'a'tack",
82.            "Hack City Ripper Pro", "Hack Office Armageddon",
83.            "Hackers Paradise, Masters Paradise", "Hackers Paradise",
84.            "Hidden port V2.0", "HVL Rat5", "ICKiller", "IcqTrojan",
85.            "IcqTrojan", "Illusion Mailer", "InCommand 1.0",
86.            "Indoctrination", "Phase Zero", "InI Killer", "Kuang",
87.            "Kuang2 The Virus", "Masters Paradise", "Masters Paradise",
88.            "Masters Paradise", "Masters Paradise", "Masters Paradise",
89.            "Maverick's Matrix", "Millenium", "Millennium", "NetBus 2 Pro",
90.            "NetMetropolitan 1.0 & 1.04", "NetMetropolitan 1.04",
91.            "NetMonitor", "NetMonitor", "NetMonitor", "NetMonitor",
92.            "NetMonitor", "NetSphere", "NetSphere", "NetSphere",
93.            "Netsphere Final", "NetSpy", "NetSpy DK", "Online Keylogger",
94.            "OOTLT", "Pass Ripper", "Phineas Phucker", "Portal of Doom",
95.            "Portal of Doom", "Portal of Doom", "Portal of Doom",
96.            "Portal of Doom", "Portal of Doom", "Portal of Doom",
97.            "Priority", "Progenic trojan", "Prosiak 0.47", "Prosiak",
98.            "Psyber Streaming Server", "Psyber Streaming Server",
99.            "Psyber Streaming Server", "Psyber Streaming Server",
100.            "Remote Grab", "Remote Window Shutdown", "Robo Hack",
101.            "Satanz Backdoor, Peur de Rien FTP", "Schwindler 1.82",
102.            "Schoolbus 1.0", "Schoolbus 1.6 & 2.0", "Schoolbus 1.6 & 2.0",
103.            "Senna Spy", "Shiva Burka", "ShockRave", "Shitheep",
104.            "Shitheep Danny", "Silencer, WebEx", "Sockets de Troie",
105.            "Sockets de Troie", "Sockets de Troie", "Socket 25", "SoftWar",
106.            "Spy Sender", "Stealth Spy", "Streaming Audio Trojan", "Striker",
107.            "SubSeven", "SubSeven", "SubSeven", "SubSeven", "SubSeven",
108.            "SubSeven 2.1", "Telecommando", "The Invasor", "The Invasor",
109.            "The Spy", "The tHing", "The tHing 1.6", "The Unexplained",
110.            "Tiny Telnet Server", "Total Eclypse 1.0", "Transscout",
111.            "TrojanCow", "Trojan Spirit 2001a", "Trojan Spirit 2001a",
112.            "Ugly Ftp", "Ultors Trojan", "Voodoo Doll", "Vampire", "Voice",
113.            "Whack-a-mole", "Whack-a-mole", "WinCrash", "WinCrash",
114.            "WinCrash", "WinCrash", "WinCrash", "Wincrash 2",
115.            "Wingate Socks Proxy", "Xtcp", "ProRat 1.9 Fix2", "SkD RAT 2.0 Beta",
116.            "Darkviews 1.00", "SpyOne 1.0 Beta", "Radoor 2.0", "MiniShell", "Possible...Not Sure,MsnFunMaker",
117.            "TGA BackDoor SP2 2.0", "Remote Shell 1.2", "Bifrost Reload 0.0.01", "MyTroyan", "Possible...NotSure YU 3.3",
118.            "Diablo", "The KamiKrazy", "The KamiKrazy(2)", "The KamiKrazy(3)", "The KamiKrazy(4)",
119.            "The KamiKrazy(5)", "The KamiKrazy(6)", "Omerta 1.3", "RLogin", "Raw", "ktelnet",
120.            "Emule p2p", ".97mm 7.1", "Fearless Trojan 1.5", "NetShadow 1.2", "MJCS Trojan",
121.            "Toquito bandito 1.2 (h)", "TransFile 1.0", "Phantom's remote file manager 1.0",
122.            "SaTaN 1.0 Lite", "Sun Shadow 1.6x", "Monk 1.0", "MSN Messanger", "Yhaoo Messenger",
123.            "Yhaoo Msn Webcam");
124. 
125. 
126.for ($z=0;$z<219;$z++) {
127.$n=0;
128.$port = @ports[$z];
129.$trojan = @trojans[$z];
130.$socket = IO::Socket::INET->new(PeerPort => "$port",
131.                                 PeerAddr => $victim,
132.                                 Proto    => "tcp",
133.                                 Timeout  => $timeout) || $n++;
134.close $socket;
135.if ($n == 0) {
136.   print (" Possible trojan or service open : ",color("red")," $trojan ",color("reset")," on the port ",color("green"), "$port\n",color("reset") );
137.   $n==0;
138.   }
139.}
140.print "Enter To Restart Program\n";
141.$restart=;
142.goto inicio ;