█████████ ███████████ █████████ █████████ ███████████ █████ ███████████ ███████████ ███████████
███░░░░░███░█░░░░░░███ ███░░░░░███ ███░░░░░███░░███░░░░░███ ░░███ ░░███░░░░░███░█░░░███░░░█░█░░░░░░███
███ ░░░ ░ ███░ ░███ ░░░ ███ ░░░ ░███ ░███ ░███ ░███ ░███░ ░███ ░ ░ ███░
░███ ███ ░░█████████ ░███ ░██████████ ░███ ░██████████ ░███ ███
░███ ███ ░░░░░░░░███░███ ░███░░░░░███ ░███ ░███░░░░░░ ░███ ███
░░███ ███ ████ █ ███ ░███░░███ ███ ░███ ░███ ░███ ░███ ░███ ████ █
░░█████████ ███████████ ░░█████████ ░░█████████ █████ █████ █████ █████ █████ ███████████
░░░░░░░░░ ░░░░░░░░░░░ ░░░░░░░░░ ░░░░░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░░░░░░░
The beginning, is just happening
CZFXP - RADMIN SCANNER PYTHON SCRIPT
This only searches for active Radmin servers, will need another script to test for null password access
import socket
import ipaddress
def check_radmin_access(ip):
try:
# Create a socket object
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(2) # Set a timeout for the connection attempt
result = sock.connect_ex((str(ip), 4899)) # Check port 4899
sock.close()
return result == 0 # Return True if the port is open
except Exception as e:
print(f"Error connecting to {ip}: {e}")
return False
def scan_ips(start_ip, end_ip):
open_radmin_ips = []
# Generate IP addresses in the specified range
for ip in ipaddress.summarize_address_range(ipaddress.IPv4Address(start_ip), ipaddress.IPv4Address(end_ip)):
for single_ip in ip:
if check_radmin_access(single_ip):
print(f"Open Radmin access found on: {single_ip}")
open_radmin_ips.append(str(single_ip))
return open_radmin_ips
def save_open_radmin_ips(open_radmin_ips, output_file):
with open(output_file, 'w') as file:
for ip in open_radmin_ips:
file.write(f"{ip}\n")
if __name__ == "__main__":
print("WELCOME TO THE CZ RADMIN SCANNER")
# Set the starting and ending IP addresses
start_ip = input("Enter the starting IP address (e.g., 192.168.1.1): ")
end_ip = input("Enter the ending IP address (e.g., 192.168.1.255): ")
output_file = 'open_radmin.txt'
open_radmin_ips = scan_ips(start_ip, end_ip)
save_open_radmin_ips(open_radmin_ips, output_file)
print(f"Scan complete. Open Radmin access found on the following IPs saved to {output_file}.")