Skip to content

Commit e8dcec5

Browse files
boy-hackboy-hack
committed
add CMS识别
1 parent 8b9b57d commit e8dcec5

9 files changed

Lines changed: 507 additions & 203 deletions

File tree

‎.gitignore‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
/.idea/*
2+
*.pyc

‎README.md‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,11 @@
11
# pythonwebhack
2-
用python实现的web框架建立的在线渗透平台
2+
用python 2.7实现的web框架建立的在线渗透平台
33
web框架是flask 前端框架是amazeUI
44

55
需要支持 flask
66
pip install flask
77

88
输入 python myweb.py 就可以运行了
9+
10+
10.21更新 加入了CMS在线识别
11+
需要pip install requests

‎baiduip.pyc‎

42 Bytes
Binary file not shown.

‎cms.py‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
#!/usr/bin/env python
2+
# coding=utf-8
3+
4+
"""
5+
Function: CMS识别系统
6+
Author: w8ay
7+
Time: 2016年10月21日 16/17/33
8+
"""
9+
10+
import requests
11+
import hashlib
12+
import socket
13+
import os
14+
15+
data = []
16+
socket.setdefaulttimeout(10)
17+
18+
def get_md5_value(src):
19+
myMd5 = hashlib.md5()
20+
myMd5.update(src)
21+
myMd5_Digest = myMd5.hexdigest()
22+
return myMd5_Digest
23+
24+
def getmd5(url):
25+
src = requests.get(url).content
26+
md5=get_md5_value(src)
27+
return md5
28+
29+
def init():
30+
file_url = os.path.abspath(os.path.split(os.path.realpath(__file__))[0] + r"./config/dna.txt")
31+
file = open(file_url)
32+
try:
33+
for line in file:
34+
str = line.strip().split(" ")
35+
ls_data={}
36+
if len(str)==3:
37+
ls_data["url"] = str[0]
38+
ls_data["name"] = str[1]
39+
ls_data["md5"] = str[2]
40+
data.append(ls_data)
41+
finally:
42+
file.close( )
43+
44+
def cms(url):
45+
if url is None:
46+
print "url is Null!"
47+
return
48+
url = url.rstrip("/")
49+
for dataline in data:
50+
_url = url + dataline["url"]
51+
#print "Scan " + _url
52+
try:
53+
status = requests.head(_url,timeout=10).status_code
54+
except:
55+
pass
56+
57+
if status==200:
58+
md5 = get_md5_value(requests.get(_url).content)
59+
#print md5
60+
if(md5 == dataline["md5"]):
61+
dataline["url"] = _url
62+
return dataline
63+
return False
64+
65+
#初始化载入字典
66+
init()
67+
if __name__ == '__main__':
68+
pass

‎config/dna.txt‎

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
/favicon.ico ecshop 724c06bcaf1a3005ba1da8207d2f43d0
2+
/favicon.ico ecshop 428b23df874b41d904bbae29057bdba5
3+
/favicon.ico Discuz c028c4822428e83a358c60a93ef65381
4+
/content/templates/default/main.css emlog add7b70ee1f05b20aee4079d00a72b60
5+
/robots.txt cmseasy 6d23cecefe90583d475a415aad172510
6+
/robots.txt cmseasy3.5 9feccf8b92b8a920d175df41fb0d362a
7+
/favicon.ico dedecms 7ef1f0a0093460fe46bb691578c07c95
8+
/robots.txt Discuz2x 2b5cb8618fba34f891ca7b59e232170a
9+
/robots.txt Discuz3x e4c3bfe695710c5610cf51723b3bdae2
10+
/robots.txt Discuz3x 4128ea5ec7c9d736bcde5acbfa2eb08f
11+
/favicon.ico Discuz!Board d1de7ce7b9fab425f49cec61d6ad0065
12+
/Vote/Img/skin/css_2/2_logo.gif foosun 8a7af084aea04360163a28ad17385fe8
13+
/js/close.gif aspcms2 1f96a4dc1fd3761cbbc63160f4663bf6
14+
/member/images/member.gif dedecms 4357834e5cd7cfdd3ea93dc93eefda9a
15+
/member/templets/images/login_logo.gif dedecms e5ef5cbf5adee69581b6ef02333b82e3
16+
/plus/img/wbg.gif dedecms 3a5f9524e65a24b169e232ed76959eb8
17+
/images/qq/qqkf2/Kf_bg03_03.gif aspcms2 fd5895d46be13038be5dffd88539cb45
18+
/favicon.ico Phpwind cfc440185d836a969827f0fd52d38e03
19+
/images/admin/login/logo.png Phpwind 77ab4d3d34521c54bb0ea09286eda1d2
20+
/admin/discuzfiles.md5 Discuz c11c470d1050bf8e20e6a94099c082f1
21+
/favicon.ico Phpcms 51fd7ea69a314e6cef2ba850d7f93853
22+
/htaccess.txt Joomla a386e1067169c649dc3949f7a198eb7b
23+
/.htaccess Drupal b0ca713850dca569644ee015458a52f3
24+
/images/kesion.png kesion 048115cf38771e35d1cb3979f08e2ed0
25+
/wp-content/themes/twentyten/images/wordpress.png Wordpress f51375d00e7d0a70c801c6256d432d3b
26+
/wp-admin/images/wp-logo-2x.png Wordpress e0c1cc94af35c8b495e35e9e6fbdad05
27+
/admin/views/style/green/style.css emlog e3891fd6c4be0d9907f6389cbc3913b3
28+
/Images/logo.gif southidc 23d42cd034b2baa4859174f25f6ddd4c
29+
/Script/Html.js southidc e42ebc34d965d29654128f18385fe2a4
30+
/kaiyuanhome/images/logo.jpg HDwiki 26089e2b5dc983e21c7e4ee7139e55e2
31+
/style/default/hdwiki.css HDwiki 1c9a27d7c1b47da2083be4012408c75e
32+
/style/default/hdwiki.css HDwiki 226c20d5f724e01cb7b0518334182ce9
33+
/style/default/hdwiki.css HDwiki 0a913f1e4f5be9f9510cd336e5a53d08
34+
/e/tool/feedback/temp/test.txt diguoCMS 8eaf3eb0a904b0507199a644d1026fd7
35+
/static/image/admincp/logo.gif Discuz 86453e237f4e78c656095a4978175b57
36+
/images/index_24.jpg 爱装网 173e61e7b4faea97eb8b1e7cb975681e
37+
/images/home/nchz_13.gif 爱装网 5929140a1a9d50d8c1168750a82858a8
38+
/images/user_logo.GIF N点虚拟主机 2f1c91922efbaf8eb92dbb8020588831
39+
/admin/Images/del.gif kesioncms 62d789a3c0e332b1b37adee5d95a5cee
40+
/KS_Inc/common.js kesioncms 7301940bc8d97156c0882e2272ab5f72
41+
/images/logo.gif 86cms dcaa64ffe249dfaa70cfc6e95466e741
42+
/adfile/ad9.js 86cms b57ae1014626b16880282e08b772e2aa
43+
/images/lzbg12.gif luzhucms 86dd66d4951f0f64aa33960546aeec3f
44+
/images/bg1.gif luzhucms 8dfe3b7bf5d8c1469eaa9e43e31aa74b
45+
/inc/image/bj.gif ideacms 95c44459669b7ccea31cdea399d454ca
46+
/inc/photo/loader.gif ideacms 71f0518dad0c74927f3bf3d4a5fb6fb2
47+
/images/act_1.gif actcms baa410081df00f46a03ae7d0bb2d50e6
48+
/images/reg.gif actcms 1a18df0fbc65058bcb98e4dd7ff9c0bf
49+
/favicon.ico qibocms 4c7d2f1c6455c0fd1493fc36cbec7089
50+
/admin/images/login/index_hz02.gif qibocms b43fb839a1b429165c614488b5c7e6ce
51+
/robots.txt siteserver daae653583650582032c5c258faa7d8a
52+
/siteserver/pic/company/logo.gif siteserver 9c958caee36407f14b3455c2d47dc5a0
53+
/Upload/Logo.jpg 智睿网站系统 199cc54208ea0f6377fd60a44aaf5793
54+
/images/Arrow_02.gif 智睿网站系统 6be608ef8b05f05b5e47d44646a1f3cd
55+
/upload/logo.jpg 智睿学校网站系统 f77fa432df69202f13d27f06bcbdbe7f
56+
/inc/qq.js YiDacms 6909101800e2587fc36e32c5431c6b4c
57+
/images/yi.png Yidacms efa2a854ad9897ec4c6c182e47045247
58+
/robots.txt EmpireCMS 1e5e773092126eadebd896fa7fb1e6e4
59+
/static/image/common/logo.png Z-Blog ee292fe9c2babc40dcdbd60d5b40e4d3
60+
/components/com_mailto/views/sent/metadata.xml joomla 891d9339b9237331848b8cf756da2953
61+
/wp-admin/js/media-upload.dev.js wordpress c89f28b3f0b28b839538d99883e70817
62+
/robots.txt phpcmsv9 7750f62fc14ea34527c09c7694a3d406
63+
/admin/ecshopfiles.md5 ecshop e99cc417418594504efcd1bb1987864c
64+
/rss.xsl powereasy动易 f2886b001cf648e033824f75ce5454bd
65+
/License.txt powereasy动易 bdb22d202c148bedac1a58859f8a4f52
66+
/images/logo.gif dvbbs a1158ed8cbc8983e4fceb8dbd5914a55
67+
/robots.txt EmpireCMS 1e5e773092126eadebd896fa7fb1e6e4
68+
/themes/README.txt drupal ebb103f4c12b214d0e1cc622c5da4216
69+
/images/logo.jpg shopxp f3266e43894b6e77d57e8ea2e160b8d8
70+
/favicon.ico mlecms a68a2169436bd7a30f2f1e17c2a36b21
71+
/favicon.ico mlecms 7d1ef8f5478fc951725b8858c371517b
72+
/admin/images/logo.png zcncms 05e27fe8919e6142f922024c77f61479
73+
/images/default/loading.gif zcncms 7b9776076d5fceef4993b55c9383dedd
74+
/favicon.ico netgather e64d01ec6dc8cee4add852e2b7a93c80
75+
/404/emessage.gif 尘月企业网站管理系统 9e64377e3975c928c3bff97d49e1917a
76+
/Admin_Cy/Script/xselect.js 尘月企业网站管理系统 17cffe01f7ad89fba3a6a4624bf5abfe
77+
/images-global/zoom/zoom-caption-fill.png abcms 30622d7dfb42b9e1d0e78b1fdd9340ce
78+
/upload/201108/1313422810.gif kuwebs 48b9ba6238fbfe755b570b40665b4183
79+
/images/images/message.gif kuwebs ea922c022775686cd300a345e9220121
80+
/install/images/00.png abcms 1513efc63c01b27ec75402e4b0d3b95f
81+
/images/_m10.GIF 青果软件教务系统 5f18dc98d899dadec18bd506ff17f253
82+
/images/index_border1.gif 青果软件教务系统 6847aab9eafaa3b18c9779ddf34f92e2
83+
/favicon.ico iwebshop 46ad7401bb5815164a01ad924ffb1436
84+
/image/watermark.gif iwebshop ac269b3a072ef820a5d4aa00d5bfd79c
85+
/favicon.ico otcms 931fefaca9f943da954fc2a1e4080146
86+
/theme/default/images/logo.gif sdcms d535f2edf34bc2d2705c236dfea92969
87+
/max-templates/default/images/logo.gif sdcms 781bf9d508406e067449c9429824ef21
88+
/adminimages/title.GIF 露珠文章管理系统 625f2078f5cc4bbffb4f1390f982b66b
89+
/ACT_inc/ItemBg.gif actcms 9cfc31ea9b376230b76bfbbf70b814bf
90+
/ACT_inc/share/minusbottom.gif actcms 934a2b40df618be35f7488ac3245aca6
91+
/Admin/Images/logo.jpg actcms 16088c9aeb5b77ef3a07db4e08834880
92+
/Admin/Images/bg_admin.jpg actcms 6b1185f2df41f38247d20f1f5b53c0cc
93+
/images/luzhu.gif 露珠文章管理系统 71433dae83ef287dc8f355377779045d
94+
/imageslzcms/logo.gif 露珠文章管理系统 1d2d2581007cbb2c3e1ea609e736d1d2
95+
/_skins/201209/images/logo.jpg 凡诺企业网站管理系统 33e6a22765897b73d0a6e97ecd57546a
96+
/UploadFiles/image/logo.png 非凡建站 40a6ec9e1d00f94a3f3dc6f093d340ea
97+
/static/image/common/logo.gif 74cms 41d072214c5462ad7185ae3d7d557145
98+
/images/usercp_usergroups.gif siteengine 2e6aa24c1f3805289405818df841dd72
99+
/data/smiliey/default/shy.gif siteengine 3227c0dda09fadbc46a1fbd7fe26f6ed
100+
/install/images/bg-input.png phpshop 663a4d8b4aef4cbad3b71b1994027c8e
101+
/shopdata/site/default_logo.png phpshop f4d64f73566e088068b8cd7ba1969eb8
102+
/plus/weather/icon/a_12.gif jumbotcms 16f7e10abf188183c3404cea5f48b42e
103+
/question/images/face/images/ico_face_arrow.gif jumbotcms 28acc83650388bf279d7113f8574c58c
104+
/favicon.ico jishigou a9bd87b58f9b9a7d939720d74d6f84bc
105+
/favicon.ico shlcms d5bb00993027e53e5eedcb8a972250fa
106+
/admini/images/dt_admini_bottom_logo.gif shlcms 960bd48dcbd38b01cac65747bf34fa31
107+
/favicon.ico jumbotcms 4c6bb4f93b1feef197722ee9e167d337
108+
/favicon.ico hishop cdfff64428dabfee701d2594bd22ac83
109+
/plugin/images/netgather_com.gif netgather 64b73952d8de270c1277b30da1def0d5
110+
/images/logo.jpg 老Y文章管理系统 91e4bffc8b4dd9c050762920102c6ac1
111+
/inc/image/m_tleft.png ideacms c72ccfb2f054f239ab0cc39ea7cb0cab
112+
/template/skin4/images/style.css ideacms 82587c6399625d54287311aabe34f073
113+
/xyuploadpic/201104/20110426234253776.jpg xycms 7c20cb7fa08054fe330814cde898bbd4
114+
/favicon.ico cmstop ecf667c14d3c6f3b0ae4b8b44b1f987a
115+
/inc/images/logo.png mlecms c6b49af9c35ed00f408ea3910b6a2bfb
116+
/favicon.ico ayacms be8f5955f093bc9f92899c00734091c5
117+
/data/index.html dedecms 1cd563226a10644da619c499df037071
118+
/job/templates/met/css/style.css metinfo 3d906218998f71e198808b7895c4dc96
119+
/upload/200911/1259148297.gif metinfo 5c7bcc7bb31c9dc10efbe93f0b51fbfc
120+
/xheditor/images/code.gif kingcms 4d140db860497655d1e42de646b9de9a
121+
/system/images/logo.png kingcms 050aa01fafbc432c5b97893282784e61
122+
/favicon.ico nitc(定海神真) 31dec4d7caee04d8e2b640a5b619bf05
123+
/images/logo.png akcms b04324f42cbe27e13ea05988013b0633
124+
/admin/images/image_new.gif cutecms 1fe436554aefee1310b083e29d6ac4c7
125+
/admin/config_upload/20130422105832iraqpj.png cutecms 16df42b7255cfec8ccb376dbf3fa2cf8
126+
/images/admina/logo.png 08cms 413946cd43e990aa551335198ae5b631
127+
/images/admina/arrow.jpg 08cms 6ad561345b55814902d014707015cf72
128+
/templates/uchome/images/sitelogo.png 建站之星 cded8ff39d38bbb9aaf4fe2e14a8678a
129+
/config/filtersearch/s3.xml KesionCMS 638922dfc689b7b9af094a968797405b
130+
/license.txt 动易 38bd1344f7a575a7d888ba2491787819
131+
/admin/images/southidc.css 南方数据 9e6a7ebe3600a3f509c8fe8e45d9344c

‎myweb.py‎

Lines changed: 28 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,10 @@
44
from flask import Flask,render_template,request
55
import re
66
import baiduip
7+
import cms
8+
import sys
9+
reload(sys)
10+
sys.setdefaultencoding('utf-8')
711

812
app = Flask(__name__)
913

@@ -12,14 +16,31 @@
1216
def index():
1317
return render_template('ip.html')
1418

15-
@app.route('/ip',methods=["post"])
19+
#IP地址定位
20+
@app.route('/ip',methods=["get","post"])
1621
def BaiduIp():
17-
ip = request.form.get("search")
18-
addr=ip.strip().split('.') #切割IP地址为一个列表
19-
if len(addr) != 4:
20-
return "IP ERROR!"
21-
data = baiduip.search(ip)
22-
return render_template('ip.html',data=data)
22+
if request.method == 'POST':
23+
ip = request.form.get("search")
24+
addr=ip.strip().split('.') #切割IP地址为一个列表
25+
if len(addr) != 4:
26+
return "IP ERROR!"
27+
data = baiduip.search(ip)
28+
return render_template('ip.html',data=data,title="高精度IP查询")
29+
else:
30+
return render_template('ip.html',title="高精度IP查询")
31+
32+
#CMS在线识别
33+
@app.route('/webdna',methods=["get","post"])
34+
def webdna():
35+
if request.method == 'POST':
36+
url = request.form.get("search")
37+
if re.match(r'^https?:/{2}\w.+$', url):
38+
data = cms.cms(url)
39+
if data is False:
40+
data["error"] = "没有找到合适的CMS"
41+
return render_template('cms.html',data=data,title="CMS识别")
42+
else:
43+
return render_template('cms.html',title="CMS识别")
2344

2445
if __name__ == '__main__':
2546
app.run(debug=True)

0 commit comments

Comments
 (0)