/* * * * * * * * * * * * * * * * * *
 *
 * propecia2.c - a fast class A port scanner
 *  
 * usage: ./propecia2 <x> <port>
 * 
 * * * *
 * 
 * This is a hack of propecia.c to include class A domain scanning 
 * and banner grabbing. Originally, propecia.c was coded with only
 * class C domain scanning.
 *
 * by John Martinelli
 *    john@martinelli.com
 *    john-martinelli.com
 *
 * * * * *
 *
 * April 15, 2007
 *
 */

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <errno.h>
#include <sys/signal.h>
#include <sys/socket.h>
#include <netinet/in.h>

int main (int argc, char *argv[])
{

  int sockfd, result, counter1, counter2, counter3;
  char host[15], banner[512];
  char *classa;
  int port;

  struct sockaddr_in address;

  if (argc < 3)
  {
    printf ("Usage: %s <x> <port>\n", argv[0]);
    exit (1);
  }

  port = atoi(argv[2]);
  classa = argv[1];
  sprintf(host, "%s.255.255.255", classa);
  printf("\n");
  if(!inet_aton(host, &address.sin_addr))
  {
    printf("Invalid Class A Address\n");
    exit(1);
  }

  for (counter1 = 1; counter1 <= 255; counter1++)
  {
  counter2 = 1;
     for (counter2 = 1; counter2 <= 255; counter2++)
    {
      counter3 = 1;
      for (counter3 = 1; counter3 <= 255; counter3++)
      {
    sprintf (host, "%s.%d.%d.%d\n", classa, counter1, counter2, counter3);
    if ((fork ()) == 0)
    {
      address.sin_family = AF_INET;
      address.sin_port = htons (port);
       address.sin_addr.s_addr = inet_addr (host);
 
      sockfd = socket (AF_INET, SOCK_STREAM, 0);

      if (sockfd < 0)
      {
        perror ("Socket");
        exit (2);
      }

      alarm (3);
      result = connect (sockfd, (struct sockaddr *) &address, sizeof(address));

      if (result == 0)
        {
          memset(banner, 0, sizeof(banner));
        read(sockfd, &banner, 512);
        printf ("[$] Port %s open on %s    Banner: %s\n", argv[2], host, banner);
        close (sockfd);
        exit (0);
      } } } }

  sleep(1);
  close (sockfd);
  exit (0);
} }