This php script scans for ProFTP instances when provided an IP range.
b67535a62c08567ea898568439edcd17fd0c5ed358a63670fce92c800ed52732
<?php
/*
ProFTP Searcher or Something Like That
Coded by Burtay
RootArea.Com | MegaTurks.Net | Burtay.Org
*/
set_time_limit(0);
error_reporting(0);
$ipbir = $argv[1];
$ipiki = $argv[2];
if($argc <=2 or $argc>=4)
die("usage : 'php proftp.php 192.168.1.1 192.169.1.1'\nCoded By Burtay \nRootArea.Com\n");
$ipbir_ayir = explode(".",$ipbir);
$ipiki_ayir = explode(".",$ipiki);
#192.168.2.*
if($ipiki_ayir[0]==$ipbir_ayir[0] and $ipiki_ayir[1]==$ipbir_ayir[1] and $ipiki_ayir[2]==$ipbir_ayir[2])
{
for($i=$ipbir_ayir[3];$i<=$ipiki_ayir[3];$i++)
{
proftp($ipbir_ayir[0].".".$ipbir_ayir[1].".".$ipbir_ayir[2].".".$i);
}
}
#192.168.*.*
elseif($ipiki_ayir[0]==$ipbir_ayir[0] and $ipiki_ayir[1]==$ipbir_ayir[1])
{
for($x=$ipbir_ayir[2];$x<=$ipiki_ayir[2];$x++)
{
if($x==$ipiki_ayir[2])
{
for($i=$ipbir_ayir[3];$i<=$ipiki_ayir[3];$i++)
{
proftp($ipbir_ayir[0].".".$ipbir_ayir[1].".".$ipbir_ayir[2].".".$i);
}
die("Scan Compeleted!\nVisit Us. \nRootArea.Com | MegaTurks.Net | Burtay.Org");
}
for($i=$ipbir_ayir[3];$i<=256;$i++)
{
proftp($ipbir_ayir[0].".".$ipbir_ayir[1].".".$ipbir_ayir[2].".".$i);
}
$ipbir_ayir[2]++;
$ipbir_ayir[3]=0;
}
}
//Others
else
{
die("Agir Ol Lan AQ / Slow Down Cowboy");
}
function proftp($ip)
{
echo "[+] trying ".$ip."\n";
$bgln = fsockopen($ip,21,$hatano,$hatastr,2);
$gelen=fgets($bgln,128);
if(eregi("ProFTPD",$gelen))
{
echo "[FOUND]".$ip." -> ".$gelen;$ac=fopen('proftp.txt','ab');fwrite($ac,$ip."\n");fclose($ac);
}
}
?>