Update weblogic_weakpasswd.py
This commit is contained in:
@@ -1,6 +1,7 @@
|
||||
# -*- coding: utf-8 -*-
|
||||
import requests
|
||||
|
||||
|
||||
'''
|
||||
Usage:
|
||||
moon.py -u tomcat http://127.0.0.1:8080
|
||||
@@ -11,6 +12,7 @@ def attack(URL):
|
||||
print('[+]开始检测-weblogic-weak_pawsswd漏洞。[+]')
|
||||
|
||||
#设定用于爆破的账户密码
|
||||
a = 0
|
||||
accounts = ['weblogic']
|
||||
passwds = ['Oracle@123','weblogic','password','weblogic1']
|
||||
for account in accounts:
|
||||
@@ -25,12 +27,16 @@ def attack(URL):
|
||||
pass
|
||||
elif 'Home Page - base_domain - WLS Console' in r.text:
|
||||
print('登录页面'+url)
|
||||
print('[+]发现弱口令:'+account+' '+passwd)
|
||||
print('[+]发现弱口令:'+account+' '+passwd+'漏洞检测结束!')
|
||||
a = 1
|
||||
else:
|
||||
print('[-]')
|
||||
print('[-]爆破发生错误,请检查网页是否可访问!')
|
||||
except:
|
||||
print('[-]访问weblogic登录页面出错.')
|
||||
print('[+]检测结束-weblogic-weak_pawsswd漏洞。[+]')
|
||||
print('[-]访问weblogic登录页面出错,漏洞检测结束!')
|
||||
if a == 0:
|
||||
print('[-]检测结束未发现weblogic-weak_pawsswd弱口令。[-]')
|
||||
else:
|
||||
pass
|
||||
print('\n')
|
||||
|
||||
if __name__ == "__main__":
|
||||
|
||||
Reference in New Issue
Block a user