常见未授权访问测试脚本

标签：version   couchdb   python   open   targe   cut   nal   rom   send   

扫描以下常见未授权访问
redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop
安装
pip3 install -r requirements.txt -i https://mirrors.aliyun.com/pypi/simple/
使用说明

python3 unauthorized-check.py url.txt

import pymongo
import requests
import ftplib
from tqdm import tqdm
import sys
from concurrent.futures import ThreadPoolExecutor


def redis(ip):
    try:
        socket.setdefaulttimeout(5)
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.connect((ip, 6379))
        s.send(bytes("INFO\r\n", ‘UTF-8‘))
        result = s.recv(1024).decode()
        if "redis_version" in result:
            print(ip + ":6379 redis未授权")
        s.close()
    except Exception as e:
        pass
    finally:
        bar.update(1)

def mongodb(ip):
    try:
        conn = pymongo.MongoClient(ip, 27017, socketTimeoutMS=4000)
        dbname = conn.list_database_names()
        print(ip + ":27017 mongodb未授权")
        conn.close()
    except Exception as e:
        pass
    finally:
        bar.update(1)

def memcached(ip):
    try:
        socket.setdefaulttimeout(5)
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.connect((ip, 11211))
        s.send(bytes(‘stats\r\n‘, ‘UTF-8‘))
        if ‘version‘ in s.recv(1024).decode():
            print(ip + ":11211 memcached未授权")
        s.close()
    except Exception as e:
        pass
    finally:
        bar.update(1)

def elasticsearch(ip):
    try:
        url = ‘http://‘ + ip + ‘:9200/_cat‘
        r = requests.get(url, timeout=5)
        if ‘/_cat/master‘ in r.content.decode():
            print(ip + ":9200 elasticsearch未授权")
    except Exception as e:
        pass
    finally:
        bar.update(1)

def zookeeper(ip):
    try:
        socket.setdefaulttimeout(5)
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.connect((ip, 2181))
        s.send(bytes(‘envi‘, ‘UTF-8‘))
        data = s.recv(1024).decode()
        s.close()
        if ‘Environment‘ in data:
            print(ip + ":2181 zookeeper未授权")
    except:
        pass
    finally:
        bar.update(1)

def ftp(ip):
    try:
        ftp = ftplib.FTP.connect(ip,21,timeout=5)
        ftp.login(‘anonymous‘, ‘Aa@12345678‘)
        print(ip + ":21 FTP未授权")
    except Exception as e:
        pass
    finally:
        bar.update(1)

def CouchDB(ip):
    try:
        url = ‘http://‘ + ip + ‘:5984‘+‘/_utils/‘
        r = requests.get(url, timeout=5)
        if ‘couchdb-logo‘ in r.content.decode():
            print(ip + ":5984 CouchDB未授权")
    except Exception as e:
        pass
    finally:
        bar.update(1)

def docker(ip):
    try:
        url = ‘http://‘ + ip + ‘:2375‘+‘/version‘
        r = requests.get(url, timeout=5)
        if ‘ApiVersion‘ in r.content.decode():
            print(ip + ":2375 docker api未授权")
    except Exception as e:
        pass
    finally:
        bar.update(1)

def Hadoop(ip):
    try:
        url = ‘http://‘ + ip + ‘:50070‘+‘/dfshealth.html‘
        r = requests.get(url, timeout=5)
        if ‘hadoop.css‘ in r.content.decode():
            print(ip + ":50070 Hadoop未授权")
    except Exception as e:
        pass
    finally:
        bar.update(1)

if __name__ == ‘__main__‘:
    if len(sys.argv) == 1:
        print("Usage:python3 unauthorized-check.py url.txt")
    file = sys.argv[1]
    with open(file, "r", encoding=‘UTF-8‘) as f:
        line = [i for i in f.readlines()]
    bar = tqdm(total=len(line)*9)
    with ThreadPoolExecutor(1000) as pool:
        for target in line:
            target=target.strip()
            pool.submit(redis, target)
            pool.submit(Hadoop, target)
            pool.submit(docker, target)
            pool.submit(CouchDB, target)
            pool.submit(ftp, target)
            pool.submit(zookeeper, target)
            pool.submit(elasticsearch, target)
            pool.submit(memcached, target)
            pool.submit(mongodb, target)```


参考来源
https://github.com/cwkiller/unauthorized-check

常见未授权访问测试脚本

标签：version   couchdb   python   open   targe   cut   nal   rom   send   

原文地址：https://www.cnblogs.com/wodekaifalog/p/14766619.html