Scanning with wingates

Introduction
Ok so you did a scan and now you have this results.log file, what the heck do yo
u do with it? Well that's just what I will talk about in this tutorial. Many peo
ple think verifying Wingates involves plugging them into a ftp client one by one
and testing them... well I got sick of doing this so I invented my own way to m
ake another program do the work for me.
Necessary Tools
*NOTE: I have downloads restricted to hits from my site, so if you get "403 Forb
idden" your browse or download manager is not sending a proper referral link. Tr
y using IE, hold shift (bypasses download managers), and left click the link, th
at should defiantly work.
Proxy Hunter v3.1 B1 - Designed to scan for proxies, used in this tutorial to ve
rify Wingates
Text Editor - Any text editor with find and replace functions will do (Notepad w
orks)
FlashFXP - A great ftp client designed with the FXP Groups in mind. (Used in Win
gate FAQ)
Installation & Setup
Ok just download Proxy Hunter (hosted by me since the authors webpage seems to h
ave disappeared) and the Settings file into the folder you set up in the previou
s tutorial. Open up the zip and run the exe file to install. Open the Settings z
ip file and extract the contents to the install folder of Proxy Hunter.
Start up Proxy Hunter and go to the menu System -> Load Options and browse to th
e settings file you extracted and load it. This will load some settings but for
some reason it doesn't save everything so the rest needs to be set up manually.
Go to System -> Change Options, on the first tab, Search&Verify Options, in the
"Others" section the plug-in "FTP" should be selected. Press the "Settings..." b
utton and it will pull up a box with ftp info, Microsoft's site is the default.
Although this seems like a good idea, I found that the first line of their login
is very long and some wingates cut it off and this makes Proxy Hunter mark some
GOOD wingates as Not Matching. So what I use is ftp.adobe.com and a welcome mes
sage of "230-ftp.adobe.com" (No quotes of course). That's really all you need to
change... you can look at the other options and play with them, but the default
s work for everything else. You can see my current settings in the screenshot to
the left.
You can also go to the "Other Options" tab and configure them to your liking, th
ey are all personal preference options and can be changed without any effect on
the ability of checking Wingates.
Make two new text files in a directory you want to store various logs in. Name t
hem "wingate - unverified.log" and "wingate - verified.log" as this is an easy w
ay to keep track of the large list you will be collecting (mine is over 400 long
).
Verification
If you set up Ping correctly when you started scanning you should have a results
.log in the Ping directory with a list of only Wingates. If there is no results.
log check your Ping settings, if you are sure they are correct you must not have
found any wingates (very rare). Ping signifies wingates by adding "WinGate engi
ne" to the end of an IP. Copy everything form the results.log and paste it into
the unverified file you created, you can then delete the results.log so it will
start clean on the next scan you do. Go to the unverified log and select "WinGat
e engine" somewhere in the file, then go to the replace function of your text ed
itor (Edit -> Replace in Notepad). It should automatically enter the selected te
xt into the "Find What" field, and in the "Replace With" field enter in ":21@FTP
" (without the quotes of course). Now simply hit "Replace All" and it will do th
e work. This is to get the log file ready for Proxy Hunter to Import. Now you'll
notice that there are a lot of space in the text still so you want to now put a
space in the Find field and nothing in the Replace field and do a "Replace All"
again. This should remove all the space from the text file, I know it works so
try again if it didn't do anything.
OK now it is ready to import to Proxy Hunter, press Ctrl-A (Select All) and then
Ctrl-C (Copy) to copy the whole list to the clipboard. No go to Proxy Hunter an
d switch it to the "Results" tab on the main screen. If there are any results fr
om a previous uses right click on them and select "Select All" then press the de
lete button on the right side. Now right clicks on the results window again and
select "Paste" (Sometimes right click wont work, if that is the case just select
the results area and press CTRL-V). It will ask if you want to avoid pasting re
petitious results, just click yes. Now it should show all the wingates you have
logged on this results tab, if you get some error message make sure you changed
the results correctly with the find & replace step.
Now press the verify all and it will go to work, after a minute or two it should
be done. Press the column where it says "Timing" until the matches marked "Good
" are on the top, now it is sorted from the fastest responses to the slowest (I
have found this is a good gauge of speed, but not always accurate). The results
marked at "Non-Matching are usually also good but the test ftp's welcome message
did not match what proxy hunter expected. This is usually caused by Wingate wel
come messages and proxy hunter thinks it is the ftp welcome message. Occasionall
y you get some that come up "Non-Matching" that will not work properly so those
need to be tested out before they are used.
Ok now open up your verified log file and make a line something like "-=[Good Wi
ngates]=-" or whatever you want to use for a section heading. Now select all the
Good Wingates in Proxy Hunter (click the top one hold shift and click the botto
m one) and right click on them and select copy. Sometimes it gives an error abou
t "Clipboard Write Failed" and then says it was successful, if it does this then
do the copy again because it most likely didn't work. Now go to the verified lo
g and paste the Good Wingates into it. Do the same procedure and paste the Non-M
atching Wingates into the log file also. You now have a listing of good wingates
to use for messing around on pubs or FXPing.