PHPmyadmin批量监测

OnionT@KillBoy
OnionT@KillBoy
作者
47
文章
0
粉丝
渗透测试136,558字数 308阅读1分1秒阅读模式
AI智能摘要
还在手动逐个扫描IP排查PHPMyAdmin风险?本文独家分享高效Python脚本,输入简单IP范围(如192.168.1.1-254),瞬间自动生成全网地址库,精准批量监测目标是否存在可入侵入口!安全人员必备的渗透测试利器,彻底解决重复劳动痛点,5分钟掌握自动化扫描核心逻辑。读完即用,让漏洞检测效率飙升,守护你的网络防线从此事半功倍。
— AI 生成的文章内容摘要
#!coding:utf-8
import requests,re,os
from sys import argv

print '''
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%| $a,        |%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%| $S`?a,     |%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
 [%%%%%%%%%%%%%%%%%%%%__%%%%%%%%%%|       `?a, |%%%%%%%%__%%%%%%%%%__%%__ %%%%]
 [% .--------..-----.|  |_ .---.-.|       .,a$%|.-----.|  |.-----.|__||  |_ %%]
 [% |  ^   ^    >>   _  ,             ,aS$""`  ||  _    _    << ^        ^ |%%]
 [% |__|__|__||_____||____||___._||%$P"`       ||   __||__||_____||__||____|%%]
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%| `"a,       ||__|%%%%%%%%%%%%%%%%%%%%%%%%%%]
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%|____`"a,$$__|%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%        `"$   %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]


                                 Author By Oniont
'''

try:
    IP = argv[1] 
    IPbegin = IP.split('-')[0] 
    IPend = IP.split('-')[1]

    IP_b1 = IPbegin.split('.')[0]
    IP_b2 = IPbegin.split('.')[1]
    IP_b3 = IPbegin.split('.')[2]
    IP_b4 = IPbegin.split('.')[3]

    IP_e1 = IPend.split('.')[0]
    IP_e2 = IPend.split('.')[1]
    IP_e3 = IPend.split('.')[2]
    IP_e4 = IPend.split('.')[3]
except:
    print u'请输入正确的IP范围格式,eg: 192.168.1.1-192.168.1.254'

IP_over = ''
IP_range = ''
IP_DIC = []

if IP_b1 == IP_e1:
    if IP_b2 == IP_e2:
        if IP_b3 == IP_e3:
            if IP_b4 == IP_e4:
                IP_over = IPbegin
            else:
                for i in range(1,255):
                    i = str(i)
                    print type(i)
                    IP_3 = IP_b1 + '.' + IP_b2 + '.' + IP_b3 + '.'+ i
                    IP_DIC.append(IP_3)
        else:
            for i in range(1,255):
                i = str(i)
                IP_2_3 = IP_b1 + '.' + IP_b2 + '.' + i
                for n in range(1,255):
                    n = str(n)
                    IP_2 = IP_2_3 + '.' + n
                    IP_DIC.append(IP_2)
    else:
        for i in range(1,255):
            i = str(i)
            IP_1_2 = IP_b1 + '.' + i
            for n in range(1,255):
                n = str(n)
                IP_1_2_3 = IP_1_2 + '.' + n
                for m in range(1,255):
                    m = str(m)
                    IP_1 = IP_1_2_3  + '.' + m
                    IP_DIC.append(IP_1)
else:
    for i in range(1,255):
        i = str(i)
        IP_0_1 = i
        for n in range(1,255):
            n = str(n)
            IP_0_2 = IP_0_1 + '.' + n
            for m in range(1,255):
                m = str(m)
                IP_0_3 = IP_0_2 + '.' + m
                for v in range(1.255):
                    v = str(v)
                    IP_0 = IP_0_3 + '.' + v
                    IP_DIC.append(IP_0)


print IP_DIC

http://www.oniont.cn/index.php/archives/232.htmlPHPmyadmin批量监测

 
OnionT@KillBoy
评论  13  访客  13
    • 猴子小跳
      猴子小跳 0

      这脚本直接跑通了,省了不少手工。

      • 星空Amy
        星空Amy 0

        代码里IP遍历的思路挺实在的。

        • 炎阳照
          炎阳照 0

          可以在requests里加个timeout参数,防止单个IP卡死导致整个扫描慢下来。

            • PhantomGlow
              PhantomGlow 0

              @ 炎阳照 加timeout确实有必要,不然卡一个IP等半天急死人。

            • 酱爆鸡丁
              酱爆鸡丁 0

              这个脚本在Windows上能直接跑吗?

                • 威武雄鹰
                  威武雄鹰 0

                  @ 酱爆鸡丁 Windows跑python脚本应该问题不大,注意路径格式就行。

                • SumireSigh
                  SumireSigh 0

                  这代码缩进真是随意,读起来有点晕。

                  • 甜美的蜜蜂蜜
                    甜美的蜜蜂蜜 0

                    看到作者把所有层次的遍历都写在一起,感觉像在玩俄罗斯方块,一层层堆叠,虽然能跑但可读性太差了,建议拆成函数再说。🤔

                    • 小布丁布丁
                      小布丁布丁 0

                      整段代码写得太密集,直接看着眼睛都累。

                      • Lina虹
                        Lina虹 1

                        整体思路还行。

                        • 远行客
                          远行客 0

                          这个批量扫IP的思路还行,挺直接的。

                        匿名

                        发表评论

                        匿名网友

                        拖动滑块以完成验证