shell-scan/shell.py at master · Rhi7/shell-scan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
#!/usr/bin/python3
# Code by PosiX

from urllib.request import Request, urlopen
from urllib.error import URLError, HTTPError
import argparse
import sys
import time

global starttime

class ZeroScann():

    def __init__(self):
        self.scan()

    def scan(self):
        # argument parser like shit
        parser = argparse.ArgumentParser(prog="PosiX.py", description="Simple Find Shell in Website")
        parser.add_argument("-u", dest="domain", help="your url")
        parser.add_argument("-w", dest="wordlist", help="your wordlsit")
        args = parser.parse_args()
        if not args.domain:
            sys.exit("\033[36musage: shell.py -u example.com -w wordlist.txt")
        if not args.wordlist:
            sys.exit("\033[36musage: shell.py -u example.com -w wordlist.txt")

        # handle url website format
        site = args.domain
        print("\033[96m[?] \033[0mStart Crawling...")
        print("\033[96m[!] \033[0mWait a sec!","\n")
        time.sleep(3)
        if not site.startswith("http://"):
            site = "http://"+site
        if not site.endswith("/"):
            site = site+"/"
        # load wordlist
        try:
            pathlist = args.wordlist
            wlist = open(pathlist, "r")
            wordlist = wlist.readlines()
        except FileNotFound as e:
            print("\033[91mUpss, Wordlist Not Found!\033[0m")
            exit()
        finally:
            try:
                wlist.close()
            except:
                print("\033[91mWordlist Can\'t Close!\033[0m")
        # user-agent
        user_agent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36"
        #list to hold the results we find
        found = []
        # respon code
        resp_codes = {403 : "403 forbidden", 401 : "401 unauthorized"}
        # loop with join pathlist
        starttime = time.time()
        for psx in wordlist:
            try:
                psx = psx.replace("\n", "")
                url = site+psx
                req = Request(url, headers={"User-Agent": user_agent})
                time.sleep(0.1)
                try:
                    connection = urlopen(req)
                    print("\033[96m[\033[90m{0}\033[96m]".format(time.strftime("%H:%M:%S")),"\033[92mfound:","\033[0m/"+psx)
                    found.append(url)

                except HTTPError as e:
                    if e.code == 404:
                        print("\033[96m[\033[90m{0}\033[96m]".format(time.strftime("%H:%M:%S")),"\033[91merror:","\033[0m/"+psx)
                    else:
                        print("\033[96m[\033[90m{0}\033[96m]".format(time.strftime("%H:%M:%S")),"\033[92minfo :","\033[33m/"+psx,"\033[92mstatus:\033[33m",resp_codes[e.code])

                except URLError as e:
                    sys.exit("\033[31m[!] Upss, No Internet Connection")
                except Exception as er:
                    print("\n\033[93m[?] \033[0mYour Connection Is Bad")
                    print("\033[93m[!] \033[0mExit Program")
                    time.sleep(3)
                    exit()
            except KeyboardInterrupt as e:
                print("\n\033[96m[?] \033[0mCTRL+C Detected")
                print("\033[96m[!] \033[0mExit Program")
                time.sleep(2)
                exit()

        if found:
            print("\n\033[96m[+] \033[0mResult Found\033[92m")
            print("\n".join(found))
            print("\033[96m[?] \033[0mTime Elasped: \033[35m%.2f\033[0m Seconds" % float(time.time()-starttime))
        else:
            print("\n\033[96m[!] \033[0mCould Not Find Any Shell Backdoor")
            print("\033[96m[?] \033[0mTime Elasped: \033[33m%.2f\033[0m Seconds" % float(time.time()-starttime))

    def banner():
        # just the screen display like this
        info = """\033[33m
                    ___
                  .'   '.
                 :       :
                 | _   _ |
              .-.|(\033[91m0\033[93m)_(\033[91m0\033[93m)|.-.
             ( ( | .--.  | ) )
              '-/ (    )  \-'
               /   '--'    \\
               \ `\033[91m"===="\033[93m`  /
                '\       /'
                 '\     /'
                 _/'-.-'\_
            _..:;\._/v\_./:;.._
          .'/;:;:;\ /^\ /;:;:;\\'.
         / /;:;:;:;\| |/:;:;:;:\ \\
        / /;:;:;:;:;\_/:;:;:;:;:\ \\ \033[91m
 # ================================== #
 # Shell Scanner                      #
 # Code by PosiX                      #\033[0m
 # Twitter: @posiX                    #
 # http://maqlo-heker.blogspot.com    #
 # ================================== #
              """
        return info
    print(banner())

if __name__ == '__main__':
    ZeroScann()