python写个御剑

前言：

今天师傅叫我，写个python版的御剑。然后我之前也写过

不过不怎么样，这次有新想法。

思路：

御剑：读取御剑配置文件里的所有路径，加上用户要扫描的url。进行批量检测，如果状态码为200并且无Error.ini里面的错误就存在该路径。报存在save.txt （详细看代码）

路径：

御剑代码：

import requests
import random
import os
file=[]
url=[]
error=[]
bc=[]
ip=[]
headers={}
user=input('Import TXT:')
banner='''
 ____            _
|  _ \  ___  ___| |_ _ __ ___  _   _  ___ _ __
| | | |/ _ \/ __| __| '__/ _ \| | | |/ _ \ '__|
| |_| |  __/\__ \ |_| | | (_) | |_| |  __/ |
|____/ \___||___/\__|_|  \___/ \__, |\___|_|
                               |___/        

Producer:Nine world
'''
useragent=[]
twoo=[]
print(banner)

def urls():
    dk=open('{}'.format(user),'r')
    for k in dk.readlines():
        qcs="".join(k.split('\n'))
        url.append(qcs)
    print('[+]url.txt Load completion')
    print(' ')
    print(' ')
urls()

def judge():
  pd=os.listdir('御剑配置文件')
  for name in pd:
      file.append(name)

  for f in file:
    print('[+]existence {}'.format(f))

  print(' ')
  print(' ')

  dk=open('user-agent.txt','r')
  for d in dk.readlines():
      qc="".join(d.split('\n'))
      useragent.append(qc)
  print('[+]user-agent Load completion')
  print(' ')
  print(' ')
judge()

def errors():
    lv=open('Error/error.txt','r')
    for e in lv.readlines():
        qcsw="".join(e.split('\n'))
        error.append(qcsw)
    print('[+]The filter file is loaded')
    print(' ')
    print(' ')
errors()

def forge():
    sj=[]
    dkw=open('ip.txt','r')
    for i in dkw.readlines():
        k="".join(i.split('\n'))
        ip.append(k)

    for g in range(0,len(useragent)):
        u='User-Agent='
        x='X-Forwarded-For='
        c='Client-IP='
        sj.append(u+useragent[g]+'&'+x+ip[g]+'&'+c+ip[g])
    kc=list(set(sj))
    su=random.choice(kc)
    qc=str(su)
    for v in qc.split('&'):
        key,value=v.split('=',1)
        headers[key]=value
forge()

def exploit():
  wi=os.listdir('御剑配置文件')
  for w in wi:
      dp=open('{}'.format('御剑配置文件/'+w),'r',encoding='gbk')
      for s in dp.readlines():
          we="".join(s.split('\n'))
          for u in url:
              up='{}'.format(u).rstrip('/')+we
              try:
                requet=requests.get(url=up,headers=headers,timeout=3,allow_redirects=False)
                for e in error:
                    if requet.status_code==200 and not e in requet.text:
                        ok='[+]code:{} url:{}'.format(requet.status_code,requet.url)
                        if ok in twoo:continue
                        twoo.append(ok)
                        print(ok)
                    else:
                        no='[x]Not url :{}'.format(requet.url)
                        if no in bc:continue
                        bc.append(no)
                        print(no)
              except Exception as u:
                  print('[-]Error {}'.format(u))

  if len(twoo)>0:
      od=open('save.txt','w')
      od.close()

      xr=open('save.txt','r')
      for c in twoo:
          print(c,file=open('save.txt','a'))

exploit()

测试效果：

Github下载地址：https://github.com/422926799/python/tree/master/%E5%BE%A1%E5%89%91