MySQL to Hash Revised.

CreationP has asked for the wisdom of the Perl Monks concerning the following question:

This is a repost of a question I had left unaswered. Due to my own failure explaining it better most probably. In order for the monks to have a better picture of what I'm trying to do I will quote my whole programs. The first one is the original I created at the start:

print "Host: ";
chop ($host = <STDIN>);
print "Port to start (1-66535): ";
chop ($start_port = <STDIN>);
print "Port to finish(1-66535): ";
chop ($last_port = <STDIN>);

    if ($start_port > $last_port) {
        print "Error! Start port cannot be bigger then end port. \n Pl
+ease re-enter start and end ports. \n\n";
    exit 1;
    }

    if ($start_port < 1) {
        print "[?] Start port cannot be less than 1. Try entering a di
+fferent number.";
    exit 1;
    }

    if ($last_port > 66535) {
        print "The maximun end port number is 66535 [..you gave $last_
+port]. \n\n";
    exit 1;
    }
    
$serverip= inet_ntoa((gethostbyname($host))[4]);
print "[*] Server's IP: [$serverip]\n";
print "[*] Scan Results: ";

open(O, ">>ScanLog.txt");
print O "\nYour target host was $host, at ",scalar(localtime), ":\n\n"
+;

while ($start_port <= $last_port) {
    $con = new IO::Socket::INET (PeerAddr => $host,PeerPort => $start_
+port,Timeout => 1, Proto => 'tcp');
    if (!($con)) {
        $start_port++;
    }
    else {
        $khost = $start_port;
        chomp($khost);
        %h;
        $h{'Echo [Returns what is sent to server]'} = {service => ['7'
+]};
        $h{'Discard [A sink, like /dev/null]'} = {service => ['9']};
        $h{'Systat [May be connected to system, w, or ps]'} = {service
+ => ['11']};
        $h{'Daytime [Sends time-of-day (date)]'} = {service => ['11']}
+;
        $h{'Netstat [Similar to systat]'} = {service => ['15']};
        $h{'ftpdata [Data connection from FTP server]'} = {service => 
+['20']};
        $h{'ftp [Control connection from FTP client (use SSH;)]'} = {s
+ervice => ['21']};
        $h{'telnet [Server port for Telnet (use SSH)]'} = {service => 
+['23']};
        $h{'smtp [Server port for SMTP (sendmail)]'} = {service => ['2
+5']};
        $h{'wins [WINS server often found here (not 1512)]'} = {servic
+e => ['42']};
        $h{'whois [whois server (rs.internic.net)]'} = {service => ['4
+3']};
        $h{'tacacs [TACACS authentication service]'} = {service => ['4
+9']};
        $h{'domain [Domain Name Service]'} = {service => ['53']};
        $h{'bootp [Usefull for probing networks (NIS name)]'} = {servi
+ce => ['67']};
        $h{'tftp [Unauthenticated file tranfer]'} = {service => ['69']
+};
        $h{'gopher [Safer if controlled using proxy servers]'} = {serv
+ice => ['70']};
        $h{'finger [Colecting usernames/passwords cracking information
+]'} = {service => ['79']};
        $h{'http [WWW, safer if controlled using proxy servers]'} = {s
+ervice => ['80']};

        
        foreach $key(keys %h)
            {foreach $service (@{$h{$key}{'service'}})
            {if($khost=~/^$service/)
            {chop($service) if ($service =~/\.$/);
            print "\n[!] Port: [$start_port] Service: $key";
            print O "[!] Port: [$start_port] Service: $key\n";
            $start_port++}}}}}
            
print O "\n ---------------------E-O-F------------------------\n";
close(O);
}
[download]

Now the program I want to create using the MySQL database contains 3 tables, one of which is the vulnerabilities tables that contains 3 fields: port, name, comments. I want to populate the hash with those vulnerabilities and then search on the target machine. Here is the program I wrote so far:

print "Host: ";
chop ($host = <STDIN>);
print "Port to start (1-66535): ";
chop ($start_port = <STDIN>);
print "Port to finish(1-66535): ";
chop ($last_port = <STDIN>);

    if ($start_port > $last_port) {
        print "Error! Start port cannot be bigger then end port. \n Pl
+ease re-enter start and end ports. \n\n";
    exit 1;
    }

    if ($start_port < 1) {
        print "[?] Start port cannot be less than 1. Try entering a di
+fferent number.";
    exit 1;
    }

    if ($last_port > 66535) {
        print "The maximun end port number is 66535 [..you gave $last_
+port]. \n\n";
    exit 1;
    }
    
$serverip= inet_ntoa((gethostbyname($host))[4]);
print "[*] Server's IP: [$serverip]\n";
print "[*] Scan Results: ";

open(O, ">>ScanLog.txt");
print O "\nYour target host was $host, at ",scalar(localtime), ":\n\n"
+;

while ($start_port <= $last_port) {
    $con = new IO::Socket::INET (PeerAddr => $host,PeerPort => $start_
+port,Timeout => 1, Proto => 'tcp');
    if (!($con)) {
        $start_port++;
    }
    else {
            
        $khost = $start_port;
        chomp($khost);
    $sql = "select * from scanner.vulnerabilities";
    $sth = $dbh->prepare($sql);
    $sth->execute
        or die "SQL Error: $DBI::errstr\n";    
        
        my %ref;
        while (my $row = $sth ->fetchrow_hashref() ){
            $ref{ $row ->{'port'}} = $row ->{'Name'}
        }
        
        foreach $key(keys %ref)
            {foreach $port (@{$ref{$key}{'port'}})
            {if($khost=~/^$port/)
            {chop($po  rt) if ($port =~/\.$/);
            print "\n[!] Port: [$start_port] Service: $key";
            print O "[!] Port: [$start_port] Service: $key\n";
            $start_port++}}}}}
            
print O "\n ---------------------E-O-F------------------------\n";
close(O);
[download]

There isn't any problems with the execution of the file but I do not think that the hash I'm trying to create is populated. If it is then the foreach loop isn't doing what is supposed to do. In other words, I'm trying to do what the first program does but by populating the hash from the database. I'm new to perl and although I think I'm going well I just can't figure out the hash from database and manipulating it. When I tried it the program is executed to the end but no logs are created of the open ports as it should have. If any monk can help me out by giving me the correct code at the hash loop and explaining me a bit about it would be very very helpfull and awsome. I have read everything about hashes and hashrefs but still I lack the general perl knowledge to understand them. It would be awsome if you take the time to help me as this is for my college graduate, in which I have never taught how to code in perl and now I'm struggling on my own. I have solved everything else I want to do except this part that I cannot get to grasp. :(

Comment on MySQL to Hash Revised. Select or Download Code

Replies are listed 'Best First'.
Re: MySQL to Hash Revised. by roboticus (Chancellor) on May 18, 2012 at 11:03 UTC
CreationP: Try using Data::Dumper, and dump the contents of variables at "interesting" points in your program. That way, you can see if the variables have the values you expect. I tried to run the program (after using strict and warnings), but it was a bit messier than I wanted to dig through in the limited time I have this morning. ...roboticus When your only tool is a hammer, all problems look like your thumb.	[reply]
Re: MySQL to Hash Revised. by poj (Abbot) on May 18, 2012 at 20:26 UTC
I'm trying to do what the first program does but by populating the hash from the database I that case maybe you should be using the Name field as the key to your hash like this `$sql = "select * from scanner.vulnerabilities"; $sth = $dbh->prepare($sql); $sth->execute or die "SQL Error: $DBI::errstr\n"; my %ref; while (my $row = $sth ->fetchrow_hashref() ){ $ref{ $row ->{'Name'} }{'port'} = [ $row ->{'port'} ]; }` [download] Also, this code only needs to run once so you can move it up outside the while loop. poj	[reply] [d/l]