Skip to content

Commit 8a2120b

Browse files
committed
hack the python by jiu
1 parent 2302779 commit 8a2120b

13 files changed

Lines changed: 812 additions & 0 deletions

‎Distinguish.py‎

Lines changed: 132 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,132 @@
1+
import requests
2+
import re
3+
import socket
4+
from bs4 import BeautifulSoup
5+
import optparse
6+
7+
def main():
8+
parser=optparse.OptionParser()
9+
parser.add_option('-p',dest='host',help='ip port scanner')
10+
parser.add_option('-w',dest='whois',help='Whois query')
11+
parser.add_option('-d',dest='dns',help='dns query')
12+
parser.add_option('-z',dest='domain',help='Domain name query')
13+
parser.add_option('-f',dest='fw',help='Bypass query')
14+
(options,args)=parser.parse_args()
15+
if options.host:
16+
ip=options.host
17+
portscanner(ip)
18+
elif options.whois:
19+
ws=options.whois
20+
whois(ws)
21+
elif options.dns:
22+
dn=options.dns
23+
dnsquery(dn)
24+
elif options.domain:
25+
domain=options.domain
26+
domains(domain)
27+
elif options.fw:
28+
pz=options.fw
29+
bypass(pz)
30+
else:
31+
parser.print_help()
32+
exit()
33+
def portscanner(ip):
34+
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
35+
socket.setdefaulttimeout(1)
36+
for port in range(1,65535):
37+
try:
38+
s.connect((ip,port))
39+
print('[+]',ip,':',port,'open')
40+
except:
41+
pass
42+
43+
def whois(ws):
44+
url = "http://whoissoft.com/{}".format(ws)
45+
rest = requests.get(url=url)
46+
csd = rest.content.decode('utf-8')
47+
fsd = BeautifulSoup(csd, 'html.parser')
48+
wsd = fsd.get_text()
49+
comp = re.compile(
50+
r'a:link, a:visited {.*? }|a:hover {.*?}|white-space: .*?;|font-family:.*?;|function\s+s|window.location.href\s+=\s+".*?"|return\s+false;| var _sedoq\s+=\s+_sedoq|_sedoq.partnerid\s+=\s+''316085'';| _sedoq.locale\s+=\s+''zh-cn'';|var\s+s\s+=\s+document.createElement|s.type\s+=\s+''text/javascript'';|s.async\s+=\s+true;|s.src\s+=\s+''.*?'';|var\s+f\s+=\s+document.getElementsByTagName|f.parentNode.insertBefore|/.*?/|pre\s+{|word-wrap:\s+break-word;|}|\s*\(str1\){|\s+\+\s+str1;|\s+\|\s+\|\|\s+{;|\s+\|\|\s+{;|_sedoq.partnerid|\s+=|''316085''|\s+'';|\s+enter\s+your\s+partner\s+id|_sedoq.locale\s+=\s+|zh-cn|language\s+locale|\(function\(\)\s+{|\[0\];|s.type|text/javascript|script|s,\s+f|document.getElementById\(.*?\)|.style.marginLeft|=window|\|\||\s+{|;|en-us,|en-uk,|de-de,|es-er-fr,|pt-br,|\s+.innerWidth2|es-|er-|fr|.innerWidth2|er|-,')
51+
tih = re.sub(comp, "", wsd)
52+
wrs = open('whois.txt', 'w')
53+
wrs.write(tih)
54+
wrs.close()
55+
wrr = open('whois.txt', 'r')
56+
rr = wrr.read()
57+
xin = rr.replace("''", '')
58+
xin2 = xin.replace("(", '')
59+
xin3 = xin2.replace(")", '')
60+
xin4 = xin3.replace("er-,", '')
61+
xin5 = xin4.replace('.innWidth2+"px"', '')
62+
xin6 = xin5.replace('window.onresize=function{', '')
63+
xin7 = xin6.replace('.innWidth2+"px"', '')
64+
print(xin7, end='')
65+
def dnsquery(dn):
66+
url = "https://jiexifenxi.51240.com/web_system/51240_com_www/system/file/jiexifenxi/get/?ajaxtimestamp=1526175925753"
67+
headers = {
68+
'user-agent': 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16'}
69+
params = {'q': '{}'.format(dn), 'type': 'a'}
70+
reqst = requests.post(url=url, headers=headers, params=params)
71+
content = reqst.content.decode('utf-8')
72+
bd = BeautifulSoup(content, 'html.parser')
73+
74+
print('---[+]A record---')
75+
print(bd.get_text())
76+
77+
print('---[+]MX record---')
78+
params2 = {'q': '{}'.format(dn), 'type': 'mx'}
79+
rest = requests.post(url=url, headers=headers, params=params2)
80+
content2 = BeautifulSoup(rest.content.decode('utf-8'), 'html.parser')
81+
print(content2.get_text())
82+
83+
print('---[+]CNAME record---')
84+
params3 = {'q': '{}'.format(dn), 'type': 'cname'}
85+
rest2 = requests.post(url=url, headers=headers, params=params3)
86+
content3 = BeautifulSoup(rest2.content.decode('utf-8'), 'html.parser')
87+
print(content3.get_text())
88+
89+
print('---[+]NS record---')
90+
params4 = {'q': '{}'.format(dn), 'type': 'ns'}
91+
rest3 = requests.post(url=url, headers=headers, params=params4)
92+
content4 = BeautifulSoup(rest3.content.decode('utf-8'), 'html.parser')
93+
print(content4.get_text())
94+
95+
print('---[+]TXT record---')
96+
params5 = {'q': '{}'.format(dn), 'type': 'txt'}
97+
rest4 = requests.post(url=url, headers=headers, params=params5)
98+
content5 = BeautifulSoup(rest4.content.decode('utf-8'), 'html.parser')
99+
print(content5.get_text())
100+
101+
def domains(domain):
102+
print('---[+]Domain name query---')
103+
url = "http://i.links.cn/subdomain/"
104+
headers = {'user-agent': 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16'}
105+
params = {'domain': '{}'.format(domain), 'b2': '1', 'b3': '1', 'b4': '1'}
106+
reqst = requests.post(url=url, headers=headers, params=params)
107+
vd = reqst.content.decode('gbk')
108+
rw = re.findall('<div class=domain><input type=hidden name=.*? id=.*? value=".*?">', vd)
109+
rw2 = "".join(str(rw))
110+
bwdw = BeautifulSoup(str(rw2), 'html.parser')
111+
pw = bwdw.find_all('input')
112+
for l in pw:
113+
isd = l.get("value")
114+
print(isd)
115+
116+
def bypass(pz):
117+
url = "http://www.webscan.cc/?action=query&ip={}".format(pz)
118+
headers = {
119+
'user-agent': 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16'}
120+
wd = requests.get(url=url, headers=headers)
121+
rcy = wd.content.decode('utf-8')
122+
res = re.findall('"domain":".*?"', str(rcy))
123+
lis = "".join(res)
124+
rmm = lis.replace('"', '')
125+
rmm2 = rmm.replace(':', '')
126+
rmm3 = rmm2.replace('/', '')
127+
rmm4 = rmm3.replace('domain', '')
128+
rmm5 = rmm4.replace('http', '')
129+
print(rmm5)
130+
131+
if __name__ == '__main__':
132+
main()

‎Interface.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{"act":"setdevice","seqid":"15071523","eno":"XXX","heart": "XXX","timespan": "XXX","data":[{"sencode":"xxx","timespan": "XXX","min": "XXX","max": "XXX"},{"sencode":"xxx","timespan": "XXX","min": "XXX","max": "XXX","opentime":"xxx","closetime":"xxx"}]}

‎cms.py‎

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,70 @@
1+
import requests
2+
import json
3+
import hashlib
4+
import os
5+
import optparse
6+
def main():
7+
usage="[-q MD5DE-CMS] " \
8+
"[- p URL gets CMS]"
9+
parser=optparse.OptionParser(usage)
10+
parser.add_option('-q',dest='md5',help='md5 cms')
11+
parser.add_option('-p',dest='url',help='url cms')
12+
(options,args)=parser.parse_args()
13+
if options.md5:
14+
log=options.md5
15+
panduan(log)
16+
elif options.url:
17+
log2=options.url
18+
panduan2(log2)
19+
else:
20+
parser.print_help()
21+
22+
23+
def op():
24+
global lr
25+
if os.path.exists('data.json'):
26+
print('[+]Existing data.json file')
27+
js=open('data.json','r')
28+
lr=json.load(js,encoding='utf-8')
29+
else:
30+
print('[-]Not data.json')
31+
exit()
32+
33+
op()
34+
35+
def panduan(log):
36+
global headers
37+
headers={'user-agent':'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36'}
38+
for b in lr:
39+
url = log.rstrip('/') + b["url"]
40+
rest = requests.get(url=url, headers=headers, timeout=5)
41+
text = rest.text
42+
if rest.status_code != 200:
43+
print('[-]Not Found 200', rest.url)
44+
md5=hashlib.md5()
45+
md5.update(text.encode('utf-8'))
46+
g=md5.hexdigest()
47+
print(g)
48+
if g == b["md5"]:
49+
print("[+]CMS:",b["name"],"url:",b["url"])
50+
print("[+]CMS:",b["name"],"url:",b["url"],file=open('cms.txt','w'))
51+
else:
52+
print('[-]not md5:',b["md5"])
53+
54+
55+
56+
def panduan2(log2):
57+
for w in lr:
58+
headers = {'user-agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36'}
59+
url = log2.rstrip('/') + w["url"]
60+
rest=requests.get(url=url,headers=headers,timeout=5)
61+
text=rest.text
62+
if rest.status_code !=200:
63+
pass
64+
if w["re"]:
65+
if(text.find(w["re"]) != -1):
66+
print('[+]CMS:',w["name"],"url:",w["url"])
67+
print('[+]CMS:', w["name"], "url:", w["url"],file=open('cms.txt','w'))
68+
69+
if __name__ == '__main__':
70+
main()

‎cms.txt‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
[+]CMS: Drupal(水滴) url: /modules/legacy/legacy.info

‎cs.py‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
import platform
2+
version=platform.uname()
3+
for p in version:
4+
print(p)

‎csrfjiance.py‎

Lines changed: 78 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
import requests,tqdm,time,os,re
2+
logo="""
3+
◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
4+
◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇
5+
◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇
6+
◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇
7+
◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇
8+
◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇
9+
◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇
10+
◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇
11+
◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇
12+
◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇
13+
◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇
14+
◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇
15+
◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇
16+
◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
17+
◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
18+
◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◇◇◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
19+
◇◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
20+
◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
21+
◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◇◇◇◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◆◆◆◆◆◆◆◆◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇◇
22+
"""
23+
print(logo)
24+
tishi="This tool is developed for research only. No law violation is related to developers."
25+
print('[!]',tishi)
26+
def osd():
27+
name=os.name
28+
if name == 'nt':
29+
print('[+]Your operating environment is windows')
30+
elif name == 'posix':
31+
print('[+]Your operating environment is Linux')
32+
else:
33+
print("[-]I'm sorry I didn't find your system")
34+
osd()
35+
36+
user=input('Enter the web site to scan:')
37+
def jiance():
38+
global content,headers,rest
39+
url=user.strip()
40+
headers={'User-Agent':'Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50'}
41+
rest=requests.get(url=url,headers=headers,timeout=6)
42+
content=rest.text
43+
if rest.status_code == 200:
44+
print('[+]The goal is to be stable')
45+
else:
46+
print('[-]The goal is unstable.')
47+
jiance()
48+
49+
user2=input('Enter the cookie:')
50+
51+
egg1 = "user_token"
52+
egg2 = "token"
53+
egg3 = "g_tk"
54+
egg = []
55+
egg.append(egg1)
56+
egg.append(egg2)
57+
egg.append(egg3)
58+
59+
60+
def csrf():
61+
cookies={}
62+
for line in user2.strip().split(';'):
63+
key,value=line.split('=',1)
64+
cookies[key]=value
65+
66+
67+
rest2=requests.get(url=user.strip(),headers=headers,timeout=6,cookies=cookies)
68+
st=rest2.text
69+
for x in egg:
70+
livs="".join(x)
71+
if livs in str(st):
72+
print('[-]There is no vulnerability in token')
73+
print('[*]name:',livs)
74+
exit()
75+
else:
76+
print('[+]url:',rest2.url)
77+
78+
csrf()

‎dianjijieci.py‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
import requests,tqdm,time,optparse
2+
def main():
3+
usage='dianjijieci.py [-u url]'
4+
parser=optparse.OptionParser(usage)
5+
parser.add_option('-u',dest='url',help='The web site to be tested URL')
6+
(options,args)=parser.parse_args()
7+
if options.url:
8+
url=options.url
9+
jiechi(url)
10+
else:
11+
parser.print_help()
12+
def jiechi(url):
13+
urls="{}".format(url)
14+
headers={'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36'}
15+
reqst=requests.get(url=urls,headers=headers,timeout=6)
16+
if reqst.status_code == 200:
17+
print('[+]Target stability')
18+
try:
19+
hea=reqst.headers
20+
print(hea['X-FRAME-OPTIONS'])
21+
print('[n]X-FRAME-OPTIONS header, no click hijacking vulnerability can be used')
22+
except:
23+
print('[+]There is no X-FRAME-OPTIONS header. There is a clicking hijacking vulnerability')
24+
print('[!]Remind:It may be a defense against JS. Please test it yourself')
25+
else:
26+
print('[n]bjective instability')
27+
28+
if __name__ == '__main__':
29+
main()

‎gonjusetup.py‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
import os
2+
import time
3+
import threading
4+
import re
5+
import optparse
6+
logo="######################" \
7+
"#此脚本将安装以下所有工具 #" \
8+
"#制作人:即刻安全-九世 # " \
9+
"##################### "
10+
print(logo)
11+
def main():
12+
usage="-x 安装信息收集工具包" \
13+
"-s 数据库扫描器"
14+
parser=optparse.OptionParser(usage)
15+
parser.add_option('-x',action='store_true',dest='xs',help='-x')
16+
parser.add_option('-s',action='store_true',dest='sj',help='-s')
17+
(options,args)=parser.parse_args()
18+
if options.xs:
19+
x=threading.Thread(target=xs,args=())
20+
x.start()
21+
elif options.sj:
22+
s=threading.Thread(target=sj,args=())
23+
s.start()
24+
else:
25+
parser.print_help()
26+
exit()
27+
28+
def xs():
29+
vis=open('mulu.txt','r').read()
30+
print('[*]将安装:')
31+
print(vis)
32+
time.sleep(1)
33+
print('[+]清空')
34+
os.system('clear')
35+
36+
print('[+]开始安装')
37+
vss=open('mulu.txt','r')
38+
for w in vss.readlines():
39+
sq=re.findall('[a-zA-z]+://[^\s]*',w)
40+
for w in sq:
41+
print('[+]正在安装:{}'.format(w))
42+
os.system('git clone {}'.format(w))
43+
print('')
44+
45+
if __name__ == '__main__':
46+
main()

0 commit comments

Comments
 (0)