Add files via upload

woshimayi · May 26, 2018 · May 26, 2018 · May 27, 2018 · Jun 9, 2018 · Jul 1, 2018
commit 8538a007ed46cd938d0f5a6570910c8164d343be
diff --git a/御剑/Error/error.txt b/御剑/Error/error.txt
diff --git a/御剑/IP generation.py b/御剑/IP generation.py
@@ -0,0 +1,15 @@
+import time
+start = time.time()
+
+xj=open('ip.txt','w')
+xj.close()
+
+print('[+]Emptying IP.txt')
+def sc():
+    user=input('Please enter IP, similar to 127.0.0.:')
+    for x in range(1,256):
+        a = '{}{}'.format(user,x)
+        print(a,file=open('ip.txt','a'))
+sc()
+stop=time.time()
+print('[+]time consuming {}'.format(start-stop))
diff --git a/御剑/ip.txt b/御剑/ip.txt
@@ -0,0 +1,255 @@
+220.181.57.1
+220.181.57.2
+220.181.57.3
+220.181.57.4
+220.181.57.5
+220.181.57.6
+220.181.57.7
+220.181.57.8
+220.181.57.9
+220.181.57.10
+220.181.57.11
+220.181.57.12
+220.181.57.13
+220.181.57.14
+220.181.57.15
+220.181.57.16
+220.181.57.17
+220.181.57.18
+220.181.57.19
+220.181.57.20
+220.181.57.21
+220.181.57.22
+220.181.57.23
+220.181.57.24
+220.181.57.25
+220.181.57.26
+220.181.57.27
+220.181.57.28
+220.181.57.29
+220.181.57.30
+220.181.57.31
+220.181.57.32
+220.181.57.33
+220.181.57.34
+220.181.57.35
+220.181.57.36
+220.181.57.37
+220.181.57.38
+220.181.57.39
+220.181.57.40
+220.181.57.41
+220.181.57.42
+220.181.57.43
+220.181.57.44
+220.181.57.45
+220.181.57.46
+220.181.57.47
+220.181.57.48
+220.181.57.49
+220.181.57.50
+220.181.57.51
+220.181.57.52
+220.181.57.53
+220.181.57.54
+220.181.57.55
+220.181.57.56
+220.181.57.57
+220.181.57.58
+220.181.57.59
+220.181.57.60
+220.181.57.61
+220.181.57.62
+220.181.57.63
+220.181.57.64
+220.181.57.65
+220.181.57.66
+220.181.57.67
+220.181.57.68
+220.181.57.69
+220.181.57.70
+220.181.57.71
+220.181.57.72
+220.181.57.73
+220.181.57.74
+220.181.57.75
+220.181.57.76
+220.181.57.77
+220.181.57.78
+220.181.57.79
+220.181.57.80
+220.181.57.81
+220.181.57.82
+220.181.57.83
+220.181.57.84
+220.181.57.85
+220.181.57.86
+220.181.57.87
+220.181.57.88
+220.181.57.89
+220.181.57.90
+220.181.57.91
+220.181.57.92
+220.181.57.93
+220.181.57.94
+220.181.57.95
+220.181.57.96
+220.181.57.97
+220.181.57.98
+220.181.57.99
+220.181.57.100
+220.181.57.101
+220.181.57.102
+220.181.57.103
+220.181.57.104
+220.181.57.105
+220.181.57.106
+220.181.57.107
+220.181.57.108
+220.181.57.109
+220.181.57.110
+220.181.57.111
+220.181.57.112
+220.181.57.113
+220.181.57.114
+220.181.57.115
+220.181.57.116
+220.181.57.117
+220.181.57.118
+220.181.57.119
+220.181.57.120
+220.181.57.121
+220.181.57.122
+220.181.57.123
+220.181.57.124
+220.181.57.125
+220.181.57.126
+220.181.57.127
+220.181.57.128
+220.181.57.129
+220.181.57.130
+220.181.57.131
+220.181.57.132
+220.181.57.133
+220.181.57.134
+220.181.57.135
+220.181.57.136
+220.181.57.137
+220.181.57.138
+220.181.57.139
+220.181.57.140
+220.181.57.141
+220.181.57.142
+220.181.57.143
+220.181.57.144
+220.181.57.145
+220.181.57.146
+220.181.57.147
+220.181.57.148
+220.181.57.149
+220.181.57.150
+220.181.57.151
+220.181.57.152
+220.181.57.153
+220.181.57.154
+220.181.57.155
+220.181.57.156
+220.181.57.157
+220.181.57.158
+220.181.57.159
+220.181.57.160
+220.181.57.161
+220.181.57.162
+220.181.57.163
+220.181.57.164
+220.181.57.165
+220.181.57.166
+220.181.57.167
+220.181.57.168
+220.181.57.169
+220.181.57.170
+220.181.57.171
+220.181.57.172
+220.181.57.173
+220.181.57.174
+220.181.57.175
+220.181.57.176
+220.181.57.177
+220.181.57.178
+220.181.57.179
+220.181.57.180
+220.181.57.181
+220.181.57.182
+220.181.57.183
+220.181.57.184
+220.181.57.185
+220.181.57.186
+220.181.57.187
+220.181.57.188
+220.181.57.189
+220.181.57.190
+220.181.57.191
+220.181.57.192
+220.181.57.193
+220.181.57.194
+220.181.57.195
+220.181.57.196
+220.181.57.197
+220.181.57.198
+220.181.57.199
+220.181.57.200
+220.181.57.201
+220.181.57.202
+220.181.57.203
+220.181.57.204
+220.181.57.205
+220.181.57.206
+220.181.57.207
+220.181.57.208
+220.181.57.209
+220.181.57.210
+220.181.57.211
+220.181.57.212
+220.181.57.213
+220.181.57.214
+220.181.57.215
+220.181.57.216
+220.181.57.217
+220.181.57.218
+220.181.57.219
+220.181.57.220
+220.181.57.221
+220.181.57.222
+220.181.57.223
+220.181.57.224
+220.181.57.225
+220.181.57.226
+220.181.57.227
+220.181.57.228
+220.181.57.229
+220.181.57.230
+220.181.57.231
+220.181.57.232
+220.181.57.233
+220.181.57.234
+220.181.57.235
+220.181.57.236
+220.181.57.237
+220.181.57.238
+220.181.57.239
+220.181.57.240
+220.181.57.241
+220.181.57.242
+220.181.57.243
+220.181.57.244
+220.181.57.245
+220.181.57.246
+220.181.57.247
+220.181.57.248
+220.181.57.249
+220.181.57.250
+220.181.57.251
+220.181.57.252
+220.181.57.253
+220.181.57.254
+220.181.57.255
diff --git a/御剑/mitsurugi.exe b/御剑/mitsurugi.exe
diff --git a/御剑/mitsurugi.py b/御剑/mitsurugi.py
@@ -0,0 +1,118 @@
+import requests
+import random
+import os
+file=[]
+url=[]
+error=[]
+bc=[]
+ip=[]
+headers={}
+user=input('Import TXT:')
+banner='''
+ ____            _                             
+|  _ \  ___  ___| |_ _ __ ___  _   _  ___ _ __ 
+| | | |/ _ \/ __| __| '__/ _ \| | | |/ _ \ '__|
+| |_| |  __/\__ \ |_| | | (_) | |_| |  __/ |   
+|____/ \___||___/\__|_|  \___/ \__, |\___|_|   
+                               |___/        
+
+Producer:Nine world 
+'''
+useragent=[]
+twoo=[]
+print(banner)
+
+def urls():
+    dk=open('{}'.format(user),'r')
+    for k in dk.readlines():
+        qcs="".join(k.split('\n'))
+        url.append(qcs)
+    print('[+]url.txt Load completion')
+    print(' ')
+    print(' ')
+urls()
+
+def judge():
+  pd=os.listdir('御剑配置文件')
+  for name in pd:
+      file.append(name)
+
+  for f in file:
+    print('[+]existence {}'.format(f))
+
+  print(' ')
+  print(' ')
+
+  dk=open('user-agent.txt','r')
+  for d in dk.readlines():
+      qc="".join(d.split('\n'))
+      useragent.append(qc)
+  print('[+]user-agent Load completion')
+  print(' ')
+  print(' ')
+judge()
+
+def errors():
+    lv=open('Error/error.txt','r',encoding='utf-8')
+    for e in lv.readlines():
+        qcsw="".join(e.split('\n'))
+        error.append(qcsw)
+    print('[+]The filter file is loaded')
+    print(' ')
+    print(' ')
+errors()
+
+def forge():
+    sj=[]
+    dkw=open('ip.txt','r')
+    for i in dkw.readlines():
+        k="".join(i.split('\n'))
+        ip.append(k)
+
+    for g in range(0,len(useragent)):
+        u='User-Agent='
+        x='X-Forwarded-For='
+        c='Client-IP='
+        sj.append(u+useragent[g]+'&'+x+ip[g]+'&'+c+ip[g])
+    kc=list(set(sj))
+    su=random.choice(kc)
+    qc=str(su)
+    for v in qc.split('&'):
+        key,value=v.split('=',1)
+        headers[key]=value
+forge()
+
+def exploit():
+  wi=os.listdir('御剑配置文件')
+  for w in wi:
+      dp=open('{}'.format('御剑配置文件/'+w),'r',encoding='gbk')
+      for s in dp.readlines():
+          we="".join(s.split('\n'))
+          for u in url:
+              up='{}'.format(u).rstrip('/')+we
+              try:
+                requet=requests.get(url=up,headers=headers,timeout=3,allow_redirects=False)
+                for e in error:
+                    if requet.status_code==200 and not e in requet.text:
+                        ok='[+]code:{} url:{}'.format(requet.status_code,requet.url)
+                        if ok in twoo:continue
+                        twoo.append(ok)
+                        print(ok)
+                    else:
+                        no='[x]Not url :{}'.format(requet.url)
+                        if no in bc:continue
+                        bc.append(no)
+                        print(no)
+              except Exception as u:
+                  print('[-]Error {}'.format(u))
+
+  if len(twoo)>0:
+      od=open('save.txt','w')
+      od.close()
+
+      xr=open('save.txt','r')
+      for c in twoo:
+          print(c,file=open('save.txt','a'))
+
+
+exploit()