python写exploit采集器

Posted 2020-11-21 东京$

前言：

根据天文地理与风水学，我掐指一算的看到了一篇不错的文章，文章里面写到整理exploit

我顿时心理想写一个exploit采集器，那么说时迟那时快。就开始写了

代码：

 思路：http://expku.com，观察URL的变化

import requests
from bs4 import *
import threading
import re
import optparse

urlsd=[]
#neirons=[]

def main():
    parser=optparse.OptionParser()
    parser.add_option(‘-m‘,action=‘store_true‘,dest=‘home‘,help=‘Save the home directory in the local area‘)
    parser.add_option(‘-w‘,action=‘store_true‘,dest=‘web‘,help=‘Save all the attack loads of Web‘)
    parser.add_option(‘-s‘,dest=‘search‘,help=‘search exploit‘)
    parser.add_option(‘-y‘,action=‘store_true‘,dest=‘long‘,help=‘Save the Long-range all exploit‘)
    parser.add_option(‘-b‘,action=‘store_true‘,dest=‘local‘,help=‘Save the local all exploit‘)
    (options,args)=parser.parse_args()
    if options.home:
        poc()
    elif options.web:
        web()
    elif options.search:
        searchs=options.search
        searchexploit(searchs)
    elif options.long:
        logins()
    elif options.local:
        local()
    else:
        parser.print_help()
        exit()
def poc():
    global headers
    print(‘[+]Emptying exploit1.txt‘)
    kw=open(‘exploitcs1.txt‘,‘w‘)
    kw.close()
    print(‘[+]Complete the emptying‘)
    print(‘[+] Generating a new list of exploit‘)
    url=‘http://expku.com/‘
    headers={‘user-agetn‘:‘Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36‘}
    rest=requests.get(url=url,headers=headers)
    qinx=rest.content.decode(‘gbk‘)
    kop=BeautifulSoup(qinx,‘html.parser‘)
    for x in kop.find_all(‘a‘):
        a=re.findall(‘<a href=".*?" target="_blank">.*?</a>‘,str(x))
        neiron="".join(a)
        nei=BeautifulSoup(neiron,‘html.parser‘)

        uw=nei.find_all(‘a‘)
        for u in uw:
            u1=u.get(‘href‘)
            urlsd.append(‘http://expku.com/‘.strip()+u1)

    urlsd.remove(urlsd[0])
    lk=list(set(urlsd))
    for m in lk:
        rest2=requests.get(url=m,headers=headers)
        pl=BeautifulSoup(rest2.content.decode(‘gbk‘),‘html.parser‘)
        for l in pl.find_all(‘h1‘):
            ks=‘title:‘,l.get_text(),‘‘,‘url:‘,rest2.url
            print(ks)
            li=‘{}‘.format(ks)
            xr=li.replace(‘(‘,‘‘).replace(‘)‘,‘‘).replace(‘,‘,‘‘).replace("‘‘",‘‘)
            pw=open(‘exploitcs1.txt‘,‘a‘)
            pw.write(xr)
            pw.write(‘
‘)
            pw.close()
def web():
    print(‘[+]empty exploit web.txt‘)
    odw=open(‘exploitweb.txt‘,‘w‘)
    odw.close()
    print(‘[+]empty complete‘)
    print(‘[+]Start writing to the collected web exploit‘)
    urlsd=[]
    headers = {
        ‘user-agetn‘: ‘Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36‘}
    for h in range(88):
        url=‘http://expku.com/web/list_6_{}.html‘.format(h)
        reques=requests.get(url=url,headers=headers)
        kw=BeautifulSoup(reques.content.decode(‘gbk‘),‘html.parser‘)
        vb=kw.find_all(‘a‘)
        for q in vb:
            pq=q.get(‘href‘)
            urls=‘http://expku.com‘.strip()+pq
            kq=re.findall(‘http://expku.com/web/.*.html‘,urls)
            for k in kq:
                urlsd.append(k)
        kc=list(set(urlsd))
        for b in kc:
            tfs=requests.get(url=b,headers=headers)
            bds=BeautifulSoup(tfs.content.decode(‘gbk‘),‘html.parser‘)
            for t in bds.find_all(‘h1‘):
                print(t.get_text(), ‘‘, tfs.url)
                print(t.get_text(),‘‘,tfs.url,file=open(‘exploitweb.txt‘,‘a‘))


def searchexploit(searchs):
    print(‘[+]search give the result as follows:‘)
    jg=[]
    rs=[]
    urlsh=[]
    headers = {‘user-agetn‘: ‘Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36‘}
    urls=‘http://expku.com/search.php?keyword={}‘.format(searchs)
    resq=requests.get(url=urls,headers=headers)
    weq=BeautifulSoup(resq.content.decode(‘gbk‘),‘html.parser‘)
    oeq=weq.find_all(‘a‘)
    for r in oeq:
        ds=r.get(‘title‘)
        durl=r.get(‘href‘)
        burw=re.findall(‘/.*/.*.html‘,durl)
        op="".join(burw)
        rs.append(op)
        kdw = ‘{}‘.format(ds)
        jg.append(kdw.replace(‘None‘, ‘‘))
    while ‘‘ in rs:
        rs.remove(‘‘)
    for g in rs:
        uw=‘http://expku.com‘.strip()+g
        urlsh.append(uw)
        urlsqf=‘http://expku.com‘.strip()+durl

    while ‘‘ in jg:
        jg.remove(‘‘)

    for g in range(0,len(urlsh)):
        print(jg[g],urlsh[g])

def logins():
    print(‘[+]empty exploitlong.txt‘)
    lwe=open(‘exploitlong.txt‘,‘w‘)
    lwe.close()
    print(‘[+]Get all remote exploit‘)
    urls=[]
    zj=[]
    headers = {
        ‘user-agetn‘: ‘Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36‘}
    for i in range(75):
        url=‘http://expku.com/remote/list_4_{}.html‘.format(i)
        regw=requests.get(url=url,headers=headers)
        lvq=BeautifulSoup(regw.content.decode(‘gbk‘),‘html.parser‘)
        fwq=lvq.find_all(‘a‘)
        for d in fwq:
            eq=d.get(‘href‘)
            oeq=re.findall(‘/remote/.*.html‘,eq)
            for b in oeq:
                ks=‘http://expku.com‘.strip()+b
                urls.append(ks)
        qwe=list(set(urls))
        for asd in lvq.find_all(‘a‘):
            kl=re.findall(‘<a href=".*" target="_blank">.*</a>‘,str(asd))
            for n in kl:
                vk=‘‘.strip()+n
                peq=BeautifulSoup(vk,‘html.parser‘)
                for t in qwe:
                    zj.append(peq.get_text()+‘ ‘+t)
        jb=list(set(zj))
        for j in jb:
            print(j)
            print(j,file=open(‘exploitlong.txt‘,‘a‘))


def local():
    print(‘[+]empty exploitlocal.txt‘)
    wd=open(‘exploitlocal.txt‘,‘w‘)
    wd.close()
    print(‘[+]get local exploit‘)
    for j in range(56):
        uk=[]
        url=‘http://expku.com/local/list_5_{}.html‘.format(j)
        headers = {
            ‘user-agetn‘: ‘Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36‘}
        rwqe=requests.get(url=url,headers=headers)
        vdq=BeautifulSoup(rwqe.content.decode(‘gbk‘),‘html.parser‘)
        hk=vdq.find_all(‘a‘)
        for f in hk:
            ddo=f.get(‘href‘)
            kio=re.findall(‘/local/.*.html‘,str(ddo))
            for g in kio:
                url=‘http://expku.com‘.strip()+g
                uk.append(url)
        yf=list(set(uk))
        for c in yf:
            rtq=requests.get(url=c,headers=headers)
            vdq=BeautifulSoup(rtq.content.decode(‘gbk‘),‘html.parser‘)
            for a in vdq.find_all(‘h1‘):
                print(a.get_text(),‘‘,rtq.url)
                print(a.get_text(), ‘‘, rtq.url,file=open(‘exploitlocal.txt‘,‘a‘))

#while ‘‘ in neirons:
 #   neirons.remove(‘‘)

#while ‘ ‘ in neirons:
 #   neirons.remove(‘ ‘)


#urlsd.remove(urlsd[0])
#rd=list(set(urlsd))

#for q in range(0,len(rd)):
 #   print(neirons[q],rd[q])

if __name__ == ‘__main__‘:
    main()

 

 

效果：

爬下来的exploit保存：

用于搜索：

Github下载地址：https://github.com/422926799/python/blob/master/exploitsearch.py