zoukankan      html  css  js  c++  java
  • [python]扫描网站后台脚本

    #!/usr/bin/python
    """<--             The scanner to scan the admin/login path
       
                                                        by co1d7urt -->"""
    import sys,httplib
    from optparse import OptionParser
    usageString = "Usage: %prog [options] hostname"
    parser = OptionParser(usage=usageString)
    (opts,args) = parser.parse_args()
    if len(args) < 1:
        parser.error("Hostname is required")
    print __doc__
    website = args[0]
    #login path
    dirs = ["admin","login","admin_index","admin/admin","admin/login","admin/index","admin/user"]
    
    for line in dirs:
        conn = httplib.HTTPConnection(website)
        conn.request('GET','/'+line)
        r1 = conn.getresponse()
        if r1.status == 200 or r1.status == 301:
            print "********************************Lucky?*************************************"
        print website+'/'+line,r1.status,r1.reason
        conn.close()
        conn = httplib.HTTPConnection(website)
        conn.request('GET','/'+line+'.asp')
        r1 = conn.getresponse()
        if r1.status == 200 or r1.status == 301:
            print "********************************Lucky?*************************************"
        print website+'/'+line+'.asp',r1.status,r1.reason
        conn.close()
        conn = httplib.HTTPConnection(website)
        conn.request('GET','/'+line+'.php')
        r1 = conn.getresponse()
        if r1.status == 200 or r1.status == 301:
            print "********************************Lucky?*************************************"
        print website+'/'+line+'.php',r1.status,r1.reason
        conn.close()
    f.close()
  • 相关阅读:
    ES6模块
    遍历数组和对象的方法
    JVM知识(六):linux环境下查看JVM内存大小
    WebSocket实时消息推送
    SpringBoot中基于Mybatis多数据源操作
    浅谈Redis中的雪崩和穿透及击穿。
    Hibernate与Mybatis的区别
    Java动态代理和反射机制
    JSON对象和JSON字符串的区别
    JVM知识(五):垃圾回收算法
  • 原文地址:https://www.cnblogs.com/co1d7urt/p/2763226.html
Copyright © 2011-2022 走看看