Python新手灰帽脚本练习--Zip文件爆破

大概思路：通过遍历字典的方式执行zipfile模块的extractall方法执行解压操作，实现爆破操作。

1、先来个常规的解压操作 

提前准备了'2323.zip'文件，并设置解压密码为‘123’，使用extractall方法实现解压。

import zipfile
zfile = zipfile.ZipFile('2323.zip')
zfile.extractall(pwd='123')

 

 

2、增加遍历字典和异常处理

 这里使用的字典为‘1.txt’

import zipfile

zFile = zipfile.ZipFile('2323.zip')
dictionary = open('1.txt','r')

for line in dictionary.readlines():
        password = line.strip('
')
        try:
            print '[-] Testing Password: ' + password
            zFile.extractall(pwd=password)
            print '[+] Password Found! The Password is : '+ password
        except:
            pass

  3、初步整理，模块化代码

import zipfile

def unzip(zFile,dictionary):
    for line in dictionary.readlines():
        password = line.strip('
')
        try:
            print '[-] Testing Password: ' + password
            result = zFile.extractall(pwd=password)
            print '[+] Password Found! The Password is : '+ password
        except:
            pass
        
def main():
    dictionary = open('1.txt','r')
    zFile = zipfile.ZipFile("2323.zip")
    unzip(zFile,dictionary)
    
if __name__ == '__main__':
    main()    

 4、增加线程提高效率

import zipfile
from threading import Thread

def unzip(zFile,dictionary):
    for line in dictionary.readlines():
        password = line.strip('
')
        try:
            print '[-] Testing Password: ' + password
            result = zFile.extractall(pwd=password)
            print '[+] Password Found! The Password is : '+ password
        except:
            pass
        
def main():
    dictionary = open('1.txt','r')
    zFile = zipfile.ZipFile("2323.zip")
    t = Thread(target = unzip , args=(zFile,dictionary))
    t.start()
if __name__ == '__main__':
    main()    

 5、最后使用sys或optparse模块实现自定义输入，进一步完善

使用sys模块：

#! /usr/bin/python
# coding=utf-8
# __author__='Dou—wei'

import zipfile
import sys
from threading import Thread

def unzip(zFile,dictionary):
    for line in dictionary.readlines():
        password = line.strip('
')
        try:
            print '[-] Testing Password: ' + password
            result = zFile.extractall(pwd=password)
            print '[+] Password Found! The Password is : '+ password
        except:
            pass
        
def main():
    zip_name = sys.argv[1]
    dict_name = sys.argv[2]
    dictionary = open(dict_name,'r')
    zFile = zipfile.ZipFile(zip_name)
    t = Thread(target = unzip , args=(zFile,dictionary))
    t.start()
    
if __name__ == '__main__':
    main()    

效果如下图：

 使用optparse模块：

#! /usr/bin/python
# coding=utf-8
# __author__='Dou—wei'

import zipfile
import optparse
from threading import Thread

def unzip(zFile,dictionary):
    for line in dictionary.readlines():
        password = line.strip('
')
        try:
            print '[-] Testing Password: ' + password
            result = zFile.extractall(pwd=password)
            print '[+] Password Found! The Password is : '+ password
        except:
            pass

def parser_support():
    parser = optparse.OptionParser("usage: <Example> python zipcrack.py"+" -f <zipfile> -d <dictionary>")
    parser.add_option('-f',dest='zname',type='string',help='specify zip file')
    parser.add_option('-d',dest='dname',type='string',help='specify dictionary file')
    (options, args)=parser.parse_args()
    if (options.zname==None) | (options.dname==None):
        print parser.usage
        exit(0)
    else:
        global zname,dname
        zname = options.zname
        dname = options.dname
        
def main():
    parser_support()
    dictionary = open(dname)
    zFile = zipfile.ZipFile(zname)
    t = Thread(target = unzip , args=(zFile,dictionary))
    t.start()

if __name__ == '__main__':
    main()    

效果如下图：