[t3htazz]

Guys i really appriciate your help.

I really need Remote Desktop Scanner for linux so i can install it on root and scan some remotes
thanks

[teh_pill]

Pm me, i may beable to help you out. or add me on msn [email protected]

[jkrusic]

are you just wanting to find computers on certain networks that have prot 3839 open for remote desktop? If so, you can download through terminal nmap so then you can do a port scan of certain address' to see if the rdp is open. Let me know if that is what you are looking for.

[t3htazz]

I really dont know how to do that i just need scanner so i can install it on my box and scan with command its simple right...??
but its hard to code it

so i need help

thank you

[jkrusic]

Alright if your using Ubuntu you can issue a sudo apt-get install zenmap which will be easiest to use since its going to be used in a GUI form otherwise if your strictly terminal based you can do sudo apt-get install nmap which will be command based. But, since I do not know which distro you are currently using I can not help with installing nmap/zenmap.. Let me know

---

With nmap/zenmap you can port scan a network to see if port 3938 is open, then you can rdp into that box. Otherwise if they are not open you can see what other ports are open and exploit those ports.

[SilvaRizla]

nmap -sV -f <target IP or Ip range> -T 1 -v

Takes a while, but worth the wait.

[V137N4m]

Heeey waht is the Name of RDP scanner for Linux ????

[Xdem0]

Something i found the other day in a post, improved it a little.
Here you go:

Code

#!/usr/bin/perl
use IO::Socket;

if ($#ARGV < 1) {
  usage();
  exit;
}

sub usage {
print "usage: $0 <port> <timeout>\n\n";
}

# define port here
my $port = $ARGV[0];
my $time = $ARGV[1];
main();

sub ipgen(){
    my $range1 = 223;    # dont want experimental/multicast
    my $range2 = 254;    
  $oct1 = int(rand($range1)) + 1;    
  $oct2 = int(rand($range2)) + 1;
  $oct3 = int(rand($range2)) + 1;
  $oct4 = int(rand($range2)) + 1;

#get rid of loopbacks and private ips
    if($oct1 == 127 || $oct1 == 172 || $oct1 == 192 || $oct1 == 10){
  $ip = &ipgen();   #local or private then get new adress
    }else{
  $ip = "$oct1.$oct2.$oct3.$oct4"; # address to return
    }

    return $ip;  #return to calle
}

sub main {

    $gr = "\033[1;31m";
    $bl = "\033[0;36m";
    $nu = "\033[0m";
    while(1==1){    
  $target = &ipgen();  # get random ip to scan
  print "[$bl*$nu] Scanning $target \n";    # output
  my $sock = new IO::Socket::INET (    # try to create socket to chose random address
     PeerAddr => $target,
     PeerPort => $port,  # change this number to change ports you want to detect
     Proto => 'tcp',
     Timeout => $time,  # you can get away with a timeout of 1 second but i have 2 to be safe
    );

    if($sock){    # if socket opened (port open)
  print "[$gr+$nu] Found $target \n";    # print to screen
  open(DAT, ">>result.txt") || die("Cannot Open Output File");  # open results file
  print DAT "$target $port\n";    # append findings to end of file
  close(DAT);    # close the file
    }

    close($sock);    # close the socket

    }
}

Generates valid ip addresses, opens a socket, tells you if it connected, then saves the address to a file.

save that code

Code

$ ./scanner.pl 5900 2

would randomly find vnc's running on a box with a 2 second timeout.
All random, but depending on the service, you can find alot.

[B-r00t]

Use nmap

Code

sudo nmap -sS -p 3389 IP/24

or use angry ip scanner http://www.angryip.org/w/Download