scan/trace1.sh at master · hackingyseguridad/scan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
#!/bin/sh
# traceroute monitor, muestra si hay cambios con ruta anteriores

DEST="hackingyseguridad.com"
PORT=443
MAX_HOPS=30
TMP_CUR="/tmp/trace_cur.$$"
TMP_PREV="/tmp/trace_prev.$$"

# Colores básicos (compatibles)
RED="$(printf '\033[31m')"
GREEN="$(printf '\033[32m')"
YELLOW="$(printf '\033[33m')"
RESET="$(printf '\033[0m')"

print_header() {
    clear
    echo "Traceroute monitor TCP $DEST:$PORT"
    echo "--------------------------------------------------------------------------"
    printf "┌─────┬─────────────────┬────────────┬──────────────────────────────────────────────┬─────────┐\n"
    printf "│ Hop │ IP              │ ASN        │ AS Nombre                                    │ Pais    │\n"
    printf "├─────┼─────────────────┼────────────┼──────────────────────────────────────────────┼─────────┤\n"
}

get_asn_info() {
    IP="$1"

    # Si no hay IP válida
    if [ "$IP" = "*" ]; then
        echo "?|?|?"
        return
    fi

    WHOIS=$(whois "$IP" 2>/dev/null)

    ASN=$(echo "$WHOIS" | awk '/origin/ {print $2; exit}')
    [ -z "$ASN" ] && ASN=$(echo "$WHOIS" | awk '/OriginAS/ {print $2; exit}')

    ASNAME=$(echo "$WHOIS" | awk -F: '/descr/ {print $2; exit}' | sed 's/^ *//')
    COUNTRY=$(echo "$WHOIS" | awk -F: '/country/ {print $2; exit}' | sed 's/^ *//')

    [ -z "$ASN" ] && ASN="?"
    [ -z "$ASNAME" ] && ASNAME="?"
    [ -z "$COUNTRY" ] && COUNTRY="?"

    echo "$ASN|$ASNAME|$COUNTRY"
}

run_trace() {
    traceroute -T -p $PORT -n -m $MAX_HOPS "$DEST" 2>/dev/null | awk '
    /^[ 0-9]/ {
        hop=$1
        ip=$2
        if (ip ~ /^[0-9.]+$/) {
            print hop "|" ip
        }
    }' > "$TMP_CUR"
}

compare_and_print() {

    print_header

    i=1
    while [ $i -le $MAX_HOPS ]; do

        LINE=$(grep "^$i|" "$TMP_CUR")
        IP=$(echo "$LINE" | cut -d'|' -f2)

        [ -z "$IP" ] && IP="*"

        INFO=$(get_asn_info "$IP")
        ASN=$(echo "$INFO" | cut -d'|' -f1)
        ASNAME=$(echo "$INFO" | cut -d'|' -f2)
        COUNTRY=$(echo "$INFO" | cut -d'|' -f3)

        COLOR=""

        if [ -f "$TMP_PREV" ]; then
            PREV_LINE=$(grep "^$i|" "$TMP_PREV")
            PREV_IP=$(echo "$PREV_LINE" | cut -d'|' -f2)

            [ -z "$PREV_IP" ] && PREV_IP="*"

            if [ "$PREV_IP" != "$IP" ]; then
                COLOR="$RED"
            fi
        fi

        printf "│ %-3s │ %s%-15s%s │ %-10s │ %-44s │ %-7s │\n" \
            "$i" "$COLOR" "$IP" "$RESET" "$ASN" "$ASNAME" "$COUNTRY"

        i=$((i+1))
    done

    printf "└─────┴─────────────────┴────────────┴──────────────────────────────────────────────┴─────────┘\n"
}

# Bucle infinito
while true; do

    run_trace
    compare_and_print

    cp "$TMP_CUR" "$TMP_PREV"

    echo
    echo "(r) http://www.hackingyseguridad.com/"
    echo "prueba siguiente traza... en 10 segundos!"
    sleep 10

done