31 lines
770 B
Python
31 lines
770 B
Python
|
# -*- coding: utf-8 -*-
|
|||
|
|
import docker
|
|||
|
|
|
|||
|
|
|
|||
|
|
'''
|
|||
|
|
Usage:
|
|||
|
|
moon.py -u docker_vuln http://127.0.0.1:2375
|
|||
|
|
此漏洞默认存在2375端口上-nmap扫描结果- 2375/tcp open docker
|
|||
|
|
贴一个漏洞介绍，可能拿shell：https://blog.csdn.net/qq_33020901/article/details/78685447
|
|||
|
|
'''
|
|||
|
|
|
|||
|
|
|
|||
|
|
def attack(URL):
|
|||
|
|
print('[+]开始检测-Docker-docker_daemon_api未授权访问。[+]')
|
|||
|
|
try:
|
|||
|
|
client = docker.DockerClient(base_url=URL)
|
|||
|
|
|
|||
|
|
print('获取到的容器列表：'+str(client.containers.list()))
|
|||
|
|
print('[+]存在漏洞，连接成功!!!')
|
|||
|
|
except:
|
|||
|
|
print('[-]连接失败，漏洞不存在。')
|
|||
|
|
print('[+]检测完成-Docker-docker_daemon_api未授权访问。[+]')
|
|||
|
|
print('\n')
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
attack()
|
|||
|
|
|