Telehack/nremps.bas
2024-11-12 12:24:44 -05:00

31 lines
801 B
QBasic

REM Run remps.exe and check for root kits
REM If no arguments given, runs on all connected hosts
REM If arguments are provided, run on hosts provided on CLI
PATTERN$="[^\s]+"
IF LEN(ARG$) = 0 THEN HOSTS$ = TH_NETSTAT$
IF LEN(ARG$) > 0 THEN HOSTS$ = ARG$
FOR I = 1 TO TH_RE(HOSTS$, PATTERN$, 1)
UNKNOWN=0
RHOST$ = TH_RE$(HOSTS$, PATTERN$, I)
TH_EXEC "remps "+RHOST$, OUT$
IF INSTR(OUT$, "Unknown",0) > 0 GOSUB 3000
IF INSTR(OUT$, "Hop limit",0) > 0 GOSUB 4000
IF INSTR(OUT$,"kit",0) = -1 GOSUB 1000
IF INSTR(OUT$,"kit",0) > 0 GOSUB 2000
NEXT I
END
1000 IF UNKNOWN = 0 THEN print RHOST$+" is NOT rooted"
RETURN
2000 IF UNKNOWN = 0 THEN print RHOST$+" is rooted"
RETURN
3000 print "Unknown host: "+ RHOST$
UNKNOWN=1
RETURN
4000 print "Hop Limit Exceeded for "+ RHOST$
UNKNOWN=1
RETURN