Skip to content

Instantly share code, notes, and snippets.

/penmode.sh

Created April 24, 2013 17:08
Show Gist options
  • Save anonymous/5453774 to your computer and use it in GitHub Desktop.
Save anonymous/5453774 to your computer and use it in GitHub Desktop.
Download ZIP
Penmode
Raw
penmode.sh
#!/bin/bash
# Autori:
#
# P @Pinperepette
# H @HackerRedenti
# # @b4d_tR1p
# 0 @Th3Zer0
# S @Stabros
#########################################################################
# This program is free software; you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation; either version 2 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program; if not, write to the Free Software #
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, #
# MA 02110-1301, USA. #
############################# DISCALIMER ################################
# Usage of this software for probing/attacking targets without prior #
# mutual consent, is illegal. It's the end user's responsability to #
# obey alla applicable local laws. Developers assume no liability and #
# are not responible for any missue or damage caused by thi program #
#########################################################################
prog="PH#0S Penmode"
disclamer="DISCLAMER LEGALE: L'uso di questo software è da considerarsi per esclusivo scopo di test.
L'utente che lo utilizza si dichiara consapevole che qualsiasi uso finalizzato a creare danni, disagi o malfunzionamenti
è illegale se non espressamente autorizzati dall'amministratore del/dei sito/i su cui viene puntato.
Gli autori non sono responsabili dell'eventuale uso improprio del presente software
o dei danni/disagi/malfunzionamenti causati dal suo utilizzo."
echo "
iMMMMMMMMai SMMM, BMMB WM8 XMM: 7WMMMMM0 7MMMMMMM,
iMMMWBBMMMM2 7MMM 8MM0 MM; XMB 8MMMWBMMMX MMMM0BBMMZ
iMM@ aMMM 7MMW aMM8 7MMMMM@@MMMM:XMMM ZMMB 7MMM :
:MMM XMMM rMMW 2MM8 XMMMMMMMMMMM;WMMS MMM ,MMM@S
iMMMSrXBMMM7 rMMMMMMMMMMMMZ SMS MM @MMX MMM. ;MMMMMMZ;
:MMMMMMMMWi rMMMWMMM@@MMM8 WMMMMM@MMMMa @MMX MMM; 7BMMMMW
:MMMr:ii 7MMB SMMZ MMMMMMMMMMM0 BMMa .MMM, ,MMM7
:MMM rMM@ ZMM8 ;MM BM7 rMMM: @MMZ XZ ,MMM:
rMMM: SMMM. BMMB 8M@ .MM; ZMMMMMMMMB MMMMMMMMMM7
iMMM, rMMW aMMZ 8MZ ;MM: 0MMMMB: .8MMMMMWi
:;i;i;i;i;iii, iii;iiii:
BMMMMMMMMMMMMMMMMMM@: .ZMMMMMMMMMMMMMMMMMMWS
MMMMMMXXSXXXXXSXSMMMMM@X 2MMMMMMMMMMMMaXXXSXXBMMMMM8ai
X 78BMMMMMa7i ,X@MMMMMM8Z. iMMMMMW7
:0MMMMMMMMMMMMMMMMMMMMMW; ;WMMMMM
:iXMMMMMMMMMMMMa;: :8MM
"
########################################################################
######################### EXTRA SUBROUTINES ############################
########################################################################
msg() {
local mesg=$1; shift
printf "${BOLD}[ ${GREEN}I${ALL_OFF}${BOLD} ]${ALL_OFF} ${mesg}\n" "$@" >&2
}
excla() {
local mesg=$1; shift
printf "${BOLD}[ ${BLUE}!${ALL_OFF}${BOLD} ]${ALL_OFF} ${mesg}\n" "$@" >&2
}
warning() {
local mesg=$1; shift
printf "${BOLD}[ ${YELLOW}W${ALL_OFF}${BOLD} ]${ALL_OFF} ${mesg}\n" "$@" >&2
}
error() {
local mesg=$1; shift
printf "${BOLD}[ ${RED}E${ALL_OFF}${BOLD} ]${ALL_OFF} ${mesg}\n" "$@" >&2
}
# check if messages are to be printed using color
unset ALL_OFF BOLD BLUE GREEN RED YELLOW
ALL_OFF="\e[1;0m"
BOLD="\e[1;1m"
BLUE="${BOLD}\e[1;34m"
GREEN="${BOLD}\e[1;32m"
RED="${BOLD}\e[1;31m"
YELLOW="${BOLD}\e[1;33m"
readonly ALL_OFF BOLD BLUE GREEN RED YELLOW
########################################################################
############################# SUBROUTINES ##############################
########################################################################
help() {
excla "$disclamer"
echo -e "Uso: penmode [tool_name][help] \nTool:"
msg "nmap - avvio programma nmap per scansione porte"
msg "nikto - effettua la scansione professionale del sito"
msg "whatweb - effettua la scansione del sito riconoscendo CMS, librerie java, blog platform e relativi servizi"
msg "joomscan - Cerca le vulnerabilita' dei CMS Joomla"
msg "wpscan - strumento per la ricerca di vulnerabilità di Wordpress"
msg "skipfish - scanner per vulnerabilità nelle web applications"
msg "exploit - htexploit bypass standard directory protection. Dobbiamo aggiungere altro?"
msg "sqlmap - è uno strumento automatico che consente la scansione e la verifica di possibili criticità nei database SQL"
msg "slowloris - strumento per attacco dos"
msg "sql_ricerca - ricerca e attacca google dork con sqlmap "
msg "socatoff - chiudi il canale socat"
}
check_socat() {
# Controllo e apertura socat
# check and open socat connections
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio Socat"
check=$(ps caux | grep socat)
if [ -n "$check" ]; then
socatpid=`pgrep socat`
echo "Socat è avviato. -> $socatpid"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat è avviato"
else
# Impostare un Target
# select target
url=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
ip=`tor-resolve $url`
socat TCP4-LISTEN:8080,fork SOCKS4a:127.0.0.1:$ip:80,socksport=9050 &
socatpid=$!
echo "Socat è ora avviato. -> $socatpid"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat è ora avviato. -> $socatpid"
fi
}
check_socat_http() {
# Controllo e apertura socat
# check and open socat http connections
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio Socat"
check=$(ps caux | grep socat)
if [ -n "$check" ]; then
socatpid=`pgrep socat`
echo "Socat è avviato. -> $socatpid"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat è avviato"
else
check_socat_http2
fi
}
check_socat_http2() {
# Impostare un Target
# select Target
url=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
if [ $url != "http://*" ];then
URL=${url#http://}
ip=`tor-resolve $URL`
socat TCP4-LISTEN:8080,fork SOCKS4a:127.0.0.1:$ip:80,socksport=9050 &
socatpid=$!
echo "Socat è ora avviato. -> $socatpid"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat è ora avviato. -> $socatpid"
a=$URL
else
ip=`tor-resolve $url`
socat TCP4-LISTEN:8080,fork SOCKS4a:127.0.0.1:$ip:80,socksport=9050 &
socatpid=$!
echo "Socat è ora avviato. -> $socatpid"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat è ora avviato. -> $socatpid"
a=$url
fi
}
kill_socat() {
check=$(ps caux | grep socat)
if [ -n "$check" ]; then
# Richiesta chiusura socat
# Ask if you need to close socat
zenity --question --text="Chiudere socat?"
if [[ "$?" = '0' ]]; then
killall socat
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Socat Chiuso"
else
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/dmerror1.png "Socat è Aperto"
fi
fi
}
ping_silenzioso() {
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Eseguo il Ping silenzioso"
ping=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
if [ $ping != "http://*" ];then
PING=${ping#http://}
ip=`tor-resolve $PING`
b=$PING
else
ip=`tor-resolve $ping`
b=$PING
fi
}
check_software() {
uscita=0
if [ $(dpkg -s zenity | grep -c "install ok") -ne "1" ]; then
error "Impossibile trovare il programma: zenity."
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/dmerror1.png "Impossibile trovare il programma: zenity."
uscita=1
fi
if [ $(dpkg -s socat | grep -c "install ok") -ne "1" ]; then
error "Impossibile trovare il programma: socat."
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/dmerror1.png "Impossibile trovare il programma: socat."
uscita=1
fi
if [ $(dpkg -s tor | grep -c "install ok") -ne "1" ]; then
error "Impossibile trovare il programma: tor."
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/dmerror1.png "Impossibile trovare il programma: tor."
uscita=1
fi
if [ "$uscita" = '1' ]; then
exit 1
fi
}
########################################################################
############### Lasciate ogni speranza o voi che entrate #############
########################################################################
check_software
notify-send -t 10000 -i /usr/share/icons/gnome/48x48/status/debmode.png "PenMode by PH#0S"
if [ $# = '1' ]; then
for i in $@; do
case $i in
#########################################################################
"nmap")
ping_silenzioso
echo "avvio scansione"
echo "$ip"
echo "$ping"
sudo proxychains nmap -sV -O -P0 -p 21,22,25,53,80,135,139,443,445 $ip | tee ./$ping-$(date +%m-%d-%Y_%H-%M).txt
break
;;
#########################################################################
"sqlmap")
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio sqlmap"
sudo proxychains sqlmap --wizard | tee ./$url-$(date +%m-%d-%Y_%H-%M)sqlmap.txt
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Finito, il report lo trovi in Home"
break
;;
#########################################################################
"sql_ricerca")
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Ricerca google dork con sqlmap"
dork=`zenity --entry --title="$prog - Inserire il target" --text="Inserire la dork"`
sudo proxychains sqlmap -g $dork --random-agent --threads=5
break
;;
#########################################################################
"whatweb")
check_socat_http
echo "avvio whatweb"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio whatweb"
sh -c whatweb
whatweb -v 127.0.0.1:8080
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Lavoro finito" "Il Report lo trovi in Home"
break
;;
#########################################################################
"joomscan")
check_socat_http
echo "avvio joomscan"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio joomscan"
sh -c joomscan
joomscan -u $a -x 127.0.0.1:8080
break
;;
#########################################################################
"exploit")
echo "avvio htexploit"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio htexploit"
sh -c htexploit
url2=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
exec sudo proxychains htexploit -u $url2 -o -w --verbose 3
break
;;
#########################################################################
"skipfish")
url2=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
if [ $url2 != "http://*" ];then
url3=${url2#http://}
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio skipfish"
echo "$url3"
exec sudo proxychains skipfish -o /home/$url3 http://$url3
else
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio skipfish"
echo "$url2"
exec sudo proxychains skipfish -o /home/$url2 http://$url2
fi
break
;;
#########################################################################
"wpscan")
killall socat
echo "socat non attivo"
echo "avvio wpscan"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio wpscan"
url2=`zenity --entry --title="$prog - Inserire il target" --text="Inserire il target"`
sh -c wpscan
exec sudo proxychains wpscan --url $url2
break
;;
#########################################################################
"slowloris")
check_socat_http
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio slowloris"
args=`zenity --forms --title="$prog - Slowloris" \
--text="Goodbye Server. DIE BITCH!" \
--separator="|" \
--add-entry="Timeout Request" \
--add-entry="Request Number"`
timeout=`echo $args | awk -F"|" '{print $1}'`
number=`echo $args | awk -F"|" '{print $2}'`
cd /opt/backbox/penmode/
exec perl ./slowloris.pl -dns 127.0.0.1 -port 8080 -timeout $timeout -num $number
break
;;
#########################################################################
"matrix")
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio matrix"
/opt/backbox/penmode/matrixish.sh
break
;;
#########################################################################
"socatoff")
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Chiudo tutti i socat"
killall socat
break
;;
#########################################################################
"help")
help
break
;;
#########################################################################
"nikto")
echo "stai per avviare nikto"
echo "una scansione può impiegare diverso tempo..."
echo "una volta lanciato potrai interagire con lui"
echo " "
echo "----------------------------------------------------"
echo "TI AVVERTO: tutte le azioni che compirai le troverai nel report in home "
echo "puoi sempre cancellarle dopo... ma per un report pulito"
echo "ti consiglio di usare solo SPAZIO"
echo "----------------------------------------------------"
echo "SPAZIO - Status Report di scansione corrente"
echo "v Attivare la modalità verbose on / off"
echo "d - Attivare la modalità di debug on / off"
echo "e - Accendere Error Reporting on / off"
echo "r - Turn redirect display on / off"
echo "c - Attiva display cookie on / off"
echo "o - Attiva OK display on/off"
echo "a - Attiva auth display on/off"
echo "q - esci"
echo "N - Prossimo ospite"
echo "P - Pausa"
echo "----------------------------------------------------"
check_socat_http
echo "avvio scansione... Urcabalurca !!!"
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Avvio Nikto"
nikto -h 127.0.0.1:8080 | tee ./$b-$(date +%m-%d-%Y_%H)nikto.txt
notify-send -t 8000 -i /usr/share/icons/gnome/48x48/status/debmode.png "Finito, il report lo trovi in Home"
break
;;
#########################################################################
*)
break;;
esac
done
else
help
exit 1
fi
kill_socat
exit
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment