Forked from Viss/gist:e7c735ed389c8d055e6f31e845f25516
Created
April 18, 2019 06:31
-
-
Save Splint3r7/21318469ccb629d972586ca1ab8c21ad to your computer and use it in GitHub Desktop.
bash one liner for extracting shodan results for weblogic.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# this script was written by viss as a challenge from @random_robbie | |
# This one-liner replaces a fairly lengthy python script | |
# if you want to be walked through it, sign up for square cash, send $viss 20 dollars. Otherwise, flex your google fu! | |
# oh, ps: you need to pip install shodan, and then configure the shodan cli client by giving it your api key. | |
# then you're off to the races. | |
shodan search --fields ip_str --limit 1000 'product:"Oracle Weblogic" port:"7001" country:"US"' | sort -u | nmap -sT -Pn -n -oG - -iL - -p 7001 | grep open | awk '{print $2}' | xargs -I % -n 1 -P 30 bash -c 'RESULT=`curl -s -I -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko0100101 Firefox/54.0" -H "Connection":"close" -H "Accept-Language":"en-US -H en;q=0.5" -H "Accept":"text/html -H application/xhtml+xml -H application/xml;q=0.9 -H */*;q=0.8" -H "Upgrade-Insecure-Requests":"1" %:7001/ws_utc/config.do | egrep HTTP`; echo "%: $RESULT";' | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment