<------------ cut cut cut ------------->
REBOL[
Title:  "Mark II Scanner"
Author: "Sp!ke"
Email:  delete_this.spike@linuxmail.org 
File:   %scanner.r
Date:   05-Jan-2001
Purpose: "Scan for anything ya' want :^)"
Comment: {
Updated version
Code's damned ugly but works OK
New additions: URL obfuscator.*
Single scans.
Change URL without exiting.
Time/Datestamp hits. (For re-scans, yet to be implemented) 
All suggestions/additions very welcome
* This only encodes the 'exploit' part of the url as
encoding the whole url is IMO fairly pointless. *
}
]
secure allow                                   ; set security level
prin "^(page)"                                 ; clear screen
set '++ func ['word] [set word (get word) + 1] ; increment like c (tidies the code a bit) 
ef: 0                                          ; hits counter
echk: 0                                        ; set unencrypted as default
;###### Vanity.... ;o) ######
print {######################################################}
print {#              Multi Scanner Ver 2.22                #}
print {#                     by -Sp!ke                      #}
print {######################################################}
print #"^/"
wait 2
prin "Site to scan: "
site: to-url join " http://" input
; Set up all the scan areas (The MOST important bit)
; add watya' wan't.........
;###############################################################################
; Common (and some not so common) cgi directories
cgi: [cgi cgibin cgis cgi-bin cgi-shl cgi-dos cgi-win scripts] 
; Scan for files
root-files: [.htpasswd .htaccess .passwd passwd.txt password password.txt sam sam.bin sam._ robots.txt]
; Log file areas.
log: [access access_log access_logs cool-logs counters error_log error_logs errors history info log logs log_files referrer referrer_log referrer_logs sitelog sitelogs site-log site-logs stats statistics url_log url_logs ]
; Smut image holders
image: [galleries gallery gallery00 gallerys html htmls images thumbs thumbnails members pages private] 
; Odd misc areas
misc: [access base db doors faqs ftp info more old temp text tmp] 
; Possible file areas
filez: [index.htm download downloads files filez full product zip zipp zips zipped]
;###############################################################################
; encoder function (allows you to 'obfuscate' your scans) 
opt-in: charset " *-._"
encode: make function! [ str[string!]] [  
rslt: make string! ( (length? str ) * 3 )
foreach  chr str [
either ( find  opt-in chr  )
[append rslt to-string chr]
[append rslt 
join "%" [back back tail(to-string(to-hex(to-integer chr)))]
]
]
rslt 
]
;###############################################################################
; Scan function (multi)
scan: func[exp][
print [ {Server to scan: }site  ]           
if find/match ask "Start scan? " "y" [ print "Working"
foreach x exp[ 
if echk == 1 [                            ; are we running encrypted? if so>
x: (encode (to-string x))]               ; part encode the URL's (ugly)
ss: join site x 
probe ss                                   ; display o/p (for testing purposes)
if exists? ss [ ++ ef
write/append %scan.log reduce [newline ss " "now/time " "now/date]]]
print [{Number of hits: }ef]
prin "Hit  to resume" input
ef: 0 ]
]
;###############################################################################
; single-scan function , this should really go into multi scan func
;                        but I like it this way to keep it simple
;                        to read.
single-scan: func[][
target: ask "Enter target file/directory: "
if echk == 1 [   
target: to-url (encode (to-string target))]
ss: join site target
either exists? ss
[print [ss {does exist}]]
[print [ss {does NOT exist}]]
if find/match ask "Another? " "y" [single-scan]
]
;###############################################################################
; Menu's
menu: func [][
prin "^(page)" 
print newline
if echk == 1 [print "**RUNNING ENCRYPTED**"]
while [not integer? (menu-choice: load ask trim
{

1 > Enter single file/dir to check
2 > Scan for cgi type directories
3 > Scan for image directories
4 > Scan for log directories
5 > Scan for file directories
6 > Scan for misc directories
7 > Scan for root files
90 > Change url to scan 
91 > Encrypted scan
92 > Plain scan
99 > Quit
-> })] [print "^/"]
if menu-choice == 90 [ prin "New site to scan: "
site: to-url join " http://" input]
if menu-choice == 91 [echk: 1] ;encrypt
if menu-choice == 92 [echk: 0] ;plain text
if menu-choice == 99 [print "Thanks for using Sp!kes multi scanner" wait 3 q]   
if menu-choice > 7 [menu]
if menu-choice < 1 [menu]
menu-choice
]
forever[
choice: menu
if choice = 1 [single-scan]
if choice = 2 [scan cgi]
if choice = 3 [scan image]
if choice = 4 [scan log]
if choice = 5 [scan filez]
if choice = 6 [scan misc]
if choice = 7 [scan root-files]
]
; fin...

 
   REBOL[ 
   Title: "mailto: Encoder" 
   File: %mail-encode.r 
   Date: "Aug-01-2000" 
   Author: "Sp!ke" 
   Purpose: { 
   To encode mailto: strings leaving them useable but 
   invisible to spam bots. 
   Modified from script by Tom Conlin tomc@cs.uoregon.edu 
   } 
   Comment: {Any char u want dont want to encrypt add to the 
   pass charset.. 

   } 
   ] 

   pass: charset 
   " *-_" 

   mail-encode: make function! [ str[string!]] [ 
   rslt: make string! ( (length? str ) * 3 ) 

   foreach chr str [ 
   either ( find pass chr ) 
   [append rslt to-string chr] 
   [append rslt 
   join "&#" [back back back tail(to-string(to-integer chr))";"] 
   ] 
   ] 
   rslt 
   ]