bl time

bl.cgi

@@ -0,0 +1,44 @@
+#!/bin/bash
+
+echo "Content-Type: text/plain"
+echo
+
+
+
+
+Q=$(echo "$QUERY_STRING" | sed -n 's/^.*q=\([^&]*\).*$/\1/p' | sed "s/%20/ /g; s/%2F/\//g; s/%5C/\\\/g" | sed "s/+/ /g; s/%2B/+/")
+
+if [[ $Q ]]
+then
+
+grep "$Q" bl.txt || echo "0	0	Not found in blacklist"
+
+
+else
+
+cat <<EOF
+# shoxf bl
+# to query this, simply use a ?q=<ip> query string
+#
+# shoxf bl outputs data in tsv format. a typical responce would look like:
+# 127.0.0.1	1
+# the second part is the category type
+#
+# category types:
+# 1: abused ip
+# 11: malware/botnet
+# 111: DDoS drone
+# 112: IRC drone
+# 12: portscanning
+# 2: vpn/proxy
+# 21: open proxy
+# 211: open socks
+# 212: open http/webpage proxy
+# 22: abused vpn/proxy
+#
+# you might notice that additional digits = sub-category :3
+
+EOF
+fi
+
+

scan

@@ -2,6 +2,6 @@
 
 for fn in $@; do
 echo "scanning $fn"
-nmap -A -T4 --script ssl-cert $fn | tee -a "index/$fn.txt"
+nmap -A -T4 --script ssl-cert,http-headers $fn | tee -a "index/$fn.txt"
 done
 

scan1

@@ -1,4 +1,4 @@
 #!/bin/bash
 
-nmap -A -T4 --script ssl-cert $@ | tee -a "index/$1.txt"
+nmap -A -T4 --script ssl-cert,http-headers $@ | tee -a "index/$1.txt"
 

scan6

@@ -2,6 +2,6 @@
 
 for fn in $@; do
 echo "scanning $fn"
-nmap -6 -A -T4 --script ssl-cert $fn | tee -a "index/$fn.txt"
+nmap -6 -A -T4 --script ssl-cert,http-headers $fn | tee -a "index/$fn.txt"
 done
 

scanap

@@ -2,6 +2,6 @@
 
 for fn in $@; do
 echo "scanning $fn"
-nmap -p 10799 -T5 --script ssl-cert $fn | tee -a "index/$fn.txt"
+nmap --script http-headers,ssl-cert -p 80,443 -Pn -T5 $fn | tee -a "index/$fn.txt"
 done
 

scann

@@ -2,6 +2,6 @@
 
 for fn in $@; do
 echo "scanning $fn"
-nmap -A -T4 --script ssl-cert $fn -Pn | tee -a "index/$fn.txt"
+nmap -p 1231,1232,1233,1234 -T4 --script ssl-cert $fn | tee -a "index/$fn.txt"
 done
 

scansn

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+for fn in $@; do
+echo "scanning $fn"
+nmap -sn $fn | tee -a "index/$fn.txt"
+done
+

whois

@@ -3,6 +3,6 @@
 for fn in $@; do
 echo "scanning $fn"
 echo "Starting WHOIS $fn" |  tee -a "index/$fn.txt"
-whois $fn | grep Abuse | tee -a "index/$fn.txt"
+whois $fn | grep 'Abuse\|NetName\|descr:' | tee -a "index/$fn.txt"
 done