modular-netstalking

Install

make install

Usage

HTTP servers

wan-ips | check-port -p 80

Quotd

wan-ips | check-port -w 1024 -p 17 -oG | xargs -I@ -P8 timeout 5 ncat @ 17

HTML titles

wan-ips | check-port -p 80 -oG | xargs -I@ -P8 curl -s @ | grep -ioP '(?<=<title>)[^<]+'

FTP listings

wan-ips | check-port -w 1024 -p 21 -oG | xargs -I@ -P8 curl 'ftp://@'

IPs w/open WP uploads dir

wan-ips | check-port -w 1024 -p 80 -oG | xargs -I@ -P8 bash -c \
  'timeout 5 curl -s "http://@/wp-content/uploads/" | grep -qF "Index of" && echo @'

Stats of open MySQL ports per 100k hosts

wan-ips -c 100000 | check-port -w 1024 -p 3306 | wc -l
# 171

Top 5 HTTP servers from 30 hosts

wan-ips | check-port -w 1024 -p 80 -c 30 -oG \
  | xargs -I@ -P8 timeout 5 curl -s --head 'http://@' \
  | grep -oP '(?<=Server: )([^\s/]+)' \
  | sort | uniq -c | sort -rk1 | head -n 5
#      6 nginx
#      2 awselb/2.0
#      1 nginx/1.22.0
#      1 nginx/1.2.1
#      1 nginx/1.16.0