Vuln-Scanner-Exploit-Combo/stats.c at main · Sewer2K/Vuln-Scanner-Exploit-Combo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
#include "stats.h"

/* ── human-readable rate formatter (like masscan/zmap) ───────── */
static void fmt_rate(double pps, char *buf) {
    if      (pps >= 1e9) snprintf(buf, 16, "%.2fGpps", pps/1e9);
    else if (pps >= 1e6) snprintf(buf, 16, "%.2fMpps", pps/1e6);
    else if (pps >= 1e3) snprintf(buf, 16, "%.1fKpps", pps/1e3);
    else                 snprintf(buf, 16, "%.0fpps",  pps);
}

/* ══════════════════════════════════════════════════════════════
 * Stats thread — prints to stderr every second
 * arg is stats_arg_t*
 * ══════════════════════════════════════════════════════════════ */
void *stats_thread(void *arg) {
    stats_arg_t *sa = (stats_arg_t *)arg;
    stats_t     *s  = sa->s;

    unsigned long long last_sent = 0, last_recv = 0;
    double last_ts = now_sec();

    sleep(1);   /* let senders warm up */

    while (*sa->running && !g_stop) {
        sleep(1);

        double   ts   = now_sec();
        double   dt   = ts - last_ts;
        if (dt   <= 0) dt = 1.0;
        last_ts  = ts;

        double elapsed = ts - s->start_time;

        unsigned long long sent = atomic_load(&s->packets_sent);
        unsigned long long recv = atomic_load(&s->packets_recv);
        unsigned long long open = atomic_load(&s->ports_open);
        unsigned long long exp  = atomic_load(&s->exploited);
        unsigned long long ver  = atomic_load(&s->verified);
        unsigned long long hon  = atomic_load(&s->honeypots);

        /* per-CVE */
        unsigned long long tp  = atomic_load(&s->cve_tplink);
        unsigned long long hik = atomic_load(&s->cve_hikvision);
        unsigned long long dlk = atomic_load(&s->cve_dlink);
        unsigned long long ngr = atomic_load(&s->cve_netgear);
        unsigned long long zyx = atomic_load(&s->cve_zyxel);
        unsigned long long rtk = atomic_load(&s->cve_realtek);
        unsigned long long csc = atomic_load(&s->cve_cisco);
        unsigned long long goa = atomic_load(&s->cve_goahead);
        unsigned long long mvp = atomic_load(&s->cve_mvpower);
        unsigned long long vac = atomic_load(&s->cve_vacron);
        unsigned long long dvr = atomic_load(&s->cve_dvr);
        unsigned long long zhn = atomic_load(&s->cve_zhone);
        unsigned long long fbr = atomic_load(&s->cve_fiber);
        unsigned long long nxt = atomic_load(&s->cve_nextjs);
        unsigned long long tel = atomic_load(&s->telnet_found);

        double pps_send = (double)(sent - last_sent) / dt;
        double pps_recv = (double)(recv - last_recv) / dt;
        last_sent = sent;
        last_recv = recv;

        double pct = 0;
        if (s->total_packets > 0)
            pct = (double)sent / (double)s->total_packets * 100.0;

        char s_send[16], s_recv[16];
        fmt_rate(pps_send, s_send);
        fmt_rate(pps_recv, s_recv);

        int hrs  = (int)elapsed / 3600;
        int mins = ((int)elapsed % 3600) / 60;
        int secs = (int)elapsed % 60;

        if (hrs > 0)
            fprintf(stderr,
                "\r\033[K[%d:%02d:%02d] %3.0f%%"
                "  send:%llu(%s)  recv:%llu(%s)"
                "  open:%llu  exp:%llu  ver:%llu  honey:%llu"
                "  tel:%llu tp:%llu hik:%llu dlk:%llu ngr:%llu"
                "  zyx:%llu rtk:%llu csc:%llu goa:%llu"
                "  mvp:%llu vac:%llu dvr:%llu zhn:%llu fbr:%llu nxt:%llu",
                hrs, mins, secs, pct,
                sent, s_send, recv, s_recv,
                open, exp, ver, hon,
                tel, tp, hik, dlk, ngr,
                zyx, rtk, csc, goa,
                mvp, vac, dvr, zhn, fbr, nxt);
        else
            fprintf(stderr,
                "\r\033[K[%02d:%02d] %3.0f%%"
                "  send:%llu(%s)  recv:%llu(%s)"
                "  open:%llu  exp:%llu  ver:%llu  honey:%llu"
                "  tel:%llu tp:%llu hik:%llu dlk:%llu"
                "  zyx:%llu rtk:%llu dvr:%llu zhn:%llu fbr:%llu nxt:%llu",
                mins, secs, pct,
                sent, s_send, recv, s_recv,
                open, exp, ver, hon,
                tel, tp, hik, dlk,
                zyx, rtk, dvr, zhn, fbr, nxt);

        fflush(stderr);
    }
    fprintf(stderr, "\n");
    return NULL;
}

/* ══════════════════════════════════════════════════════════════
 * Final summary
 * ══════════════════════════════════════════════════════════════ */
void stats_print_final(const stats_t *s, const scanner_config_t *cfg) {
    double elapsed = now_sec() - s->start_time;

    printf("\n");
    printf("╔═══════════════════════════════════════════════════════╗\n");
    printf("║              ULTRA SCANNER — COMPLETED                ║\n");
    printf("╚═══════════════════════════════════════════════════════╝\n");
    printf("\n[+] Summary:\n");
    printf("    Elapsed:       %.1fs\n", elapsed);
    printf("    Packets sent:  %llu\n",  atomic_load(&s->packets_sent));
    printf("    Responses:     %llu\n",  atomic_load(&s->packets_recv));
    printf("    Open ports:    %llu\n",  atomic_load(&s->ports_open));
    printf("    Exploited:     %llu\n",  atomic_load(&s->exploited));
    printf("    Verified:      %llu\n",  atomic_load(&s->verified));
    printf("    Honeypots:     %llu\n",  atomic_load(&s->honeypots));
    printf("\n[+] By CVE:\n");
    printf("    Telnet:   %llu\n", atomic_load(&s->telnet_found));
    printf("    TP-Link:  %llu  (CVE-2023-1389)\n",  atomic_load(&s->cve_tplink));
    printf("    Hikvision:%llu  (CVE-2021-36260)\n", atomic_load(&s->cve_hikvision));
    printf("    D-Link:   %llu  (CVE-2019-16920)\n", atomic_load(&s->cve_dlink));
    printf("    Netgear:  %llu  (CVE-2020-35590)\n", atomic_load(&s->cve_netgear));
    printf("    Zyxel:    %llu  (CVE-2020-9054)\n",  atomic_load(&s->cve_zyxel));
    printf("    Realtek:  %llu  (CVE-2014-8361)\n",  atomic_load(&s->cve_realtek));
    printf("    Cisco:    %llu  (CVE-2019-1663)\n",  atomic_load(&s->cve_cisco));
    printf("    GoAhead:  %llu  (CVE-2017-8225)\n",  atomic_load(&s->cve_goahead));
    printf("    MVPower:  %llu  (DVR backdoor)\n",   atomic_load(&s->cve_mvpower));
    printf("    Vacron:   %llu  (NVR RCE)\n",        atomic_load(&s->cve_vacron));
    printf("    DVR-Hi3520:%llu (XML NTP)\n",        atomic_load(&s->cve_dvr));
    printf("    Zhone:    %llu  (ping inject)\n",    atomic_load(&s->cve_zhone));
    printf("    Fiber:    %llu  (Boa 0.93.15)\n",    atomic_load(&s->cve_fiber));
    printf("    Next.js:  %llu  (CVE-2025-55182/66478)\n", atomic_load(&s->cve_nextjs));
    printf("\n[+] Output:\n");
    printf("    TXT:  %s\n", cfg->output_txt);
    printf("    JSON: %s\n", cfg->output_json);
    printf("\n");
}