150 lines
4.3 KiB
Python
150 lines
4.3 KiB
Python
#coding : utf-8
|
||
from lib.core.common import url_handle
|
||
# import re
|
||
|
||
class POCBase(object):
|
||
|
||
def __init__(self,target,proxy = None):
|
||
|
||
self.target = target[:-1] if target.endswith("/") else target
|
||
|
||
if "://" in self.target and self.target.count(":") == 2:
|
||
pass
|
||
elif "://" not in self.target and self.target.count(":") == 1:
|
||
self.target = url_handle(target)
|
||
|
||
elif "://" in self.target and self.target.count(":") == 1 :
|
||
# self.target = target+":80"
|
||
pass
|
||
elif self.target.count(":") == 0:
|
||
self.target = "http://" + self.target + ":80"
|
||
else:
|
||
err_msg = "url不符合规则，请输入类似于：http://ip:port 的target"
|
||
exit()
|
||
|
||
self.protocol = self.target.split("://")[0]+"://"
|
||
self.host = self.target.split("://")[1].split(":")[0]
|
||
if self.target.count(":") == 2:
|
||
self.port = self.target.split("://")[1].split(":")[1]
|
||
else: self.port = None
|
||
|
||
self.proxy = proxy
|
||
self.timeout = 10
|
||
|
||
|
||
def _honeypot_check(self,text):
|
||
text = str(text)
|
||
|
||
|
||
honeycode = """
|
||
<title>NETZEN</title>
|
||
<title>NOVIcam WEB</title>
|
||
<title>Object moved</title>
|
||
<title>onyphe.io</title>
|
||
<title>OoklaServer</title>
|
||
<title>Openfire Admin Console</title>
|
||
<title>Openfire Console d'Administration: Configuration du Serveur</title>
|
||
<title>Openfire Setup</title>
|
||
<title>Password required</title>
|
||
<title>phpinfo()</title>
|
||
<title>phpMyAdmin</title>
|
||
<title>phpMyAdmin </title>
|
||
<title>PlayerasTangamanga.app</title>
|
||
<title>Proxy Scanning in progress</title>
|
||
<title>QNAP</title>
|
||
<title>Recording Management System</title>
|
||
<title>Residential Gateway Login</title>
|
||
<title>RouterOS router configuration page</title>
|
||
<title>SPORTING NEWS – News from sports world – now updated daily!</title>
|
||
<title>The Best Online Casinos for USA Players</title>
|
||
<title>torservers.net - Anonymizer Tor Exit Router</title>
|
||
"""
|
||
if honeycode in text:
|
||
return True
|
||
|
||
########## 可可爱爱的分割线 ############
|
||
|
||
honeycode = """
|
||
WWW-Authenticate: Basic realm="AXIS_00408CD0EC74"
|
||
WWW-Authenticate: Basic realm="NETGEAR DGN2200"
|
||
WWW-Authenticate: Basic realm="NETGEAR D6300B"
|
||
WWW-Authenticate: Basic realm="NETGEAR DGN1000B"
|
||
Www-Authenticate: Basic realm="SickBeard"
|
||
WWW-Authenticate: Basic realm="netcam"
|
||
WWW-Authenticate: Basic realm="NETGEAR R7000"
|
||
WWW-Authenticate: Basic realm="NETGEAR R6400"
|
||
WWW-Authenticate: Basic realm="Broadcom Home Gateway Reference Design"
|
||
WWW-Authenticate: Basic realm="hikvision"
|
||
WWW-Authenticate: Basic realm="NETGEAR WGR614v10"
|
||
WWW-Authenticate: Basic realm="NETGEAR Orbi-mini"
|
||
WWW-Authenticate: Basic realm="NETGEAR Orbi"
|
||
WWW-Authenticate: Basic realm="Linksys-CIT400"
|
||
WWW-Authenticate: Basic realm="Login to the Router Web Configurator"
|
||
WWW-Authenticate: Basic realm="NETGEAR Orbi-micro"
|
||
WWW-Authenticate: Digest realm="IPCamera Login"
|
||
WWW-Authenticate: Basic realm="TP-LINK Wireless Dual Band Gigabit Router WDR4300"
|
||
"""
|
||
|
||
|
||
if honeycode in text:
|
||
return True
|
||
|
||
########## 可可爱爱的分割线 ############
|
||
|
||
|
||
honeycode = """
|
||
windows--2017
|
||
write = system,call,log,verbose,command,agent,user,originate
|
||
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
|
||
},
|
||
荣耀立方
|
||
-->
|
||
</p>
|
||
</body></html>
|
||
"""
|
||
|
||
if honeycode in text:
|
||
return True
|
||
|
||
########## 可可爱爱的分割线 ############
|
||
|
||
|
||
if "www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin" in text \
|
||
and "var DEFAULT_PASSWD = \"admin\";" in text \
|
||
and "HDS-7204TVI-HDMI/K 192.168.100.89,Digital Video Recorder" in text\
|
||
and "\"tagline\" : \"You Know, for Search\"" in text:
|
||
return True
|
||
|
||
########## 可可爱爱的分割线 ############
|
||
|
||
honeycode = """
|
||
var TAB_CODE=9
|
||
var DEL_CODE=46
|
||
var BS_CODE=8
|
||
var SP_CODE=32
|
||
var DOT_CODE=190
|
||
var DOT2_CODE=110
|
||
|
||
var IDX_ON=0
|
||
var IDX_OFF=1
|
||
|
||
var IDX_AP_MODE=0
|
||
var IDX_CBRIDGE_MODE=1
|
||
var IDX_WWAN_MODE=2
|
||
var IDX_KAI_MODE=3
|
||
var IDX_MBRIDGE_MODE=4
|
||
"""
|
||
if honeycode in text:
|
||
return True
|
||
|
||
return False
|
||
|
||
def _verify(self):
|
||
|
||
raise NotImplementedError
|
||
|
||
def _attack(self):
|
||
|
||
raise NotImplementedError
|
||
|