awd攻防比赛总结——3s_NwGeekVIP专享VIP免费

3.AWD3s_NwGeekawdwebpwnwebflagflagflaggetshellflag10flagweb101.2.rootwafgetshdownloadflag#!/usr/bin/python2.7# -*-coding:UTF-8-*-# madeby3s_NwGeekfromgeventimportmonkeyfromgevent.poolimportPoolmonkey.patch_all()importsys#importos,time,requestsclassFILE:def__init__(self,FILEPATH):self.filepath=FILEPATHself.filename=(FILEPATH.split("\\")[-l])self.dirpath=FILEPATH.replace(self.filename,"")defcheck(ip,port,Timeout=5):#DDDDDDDDDDDDDDDDcheck_target=ip+":"+str(port)#DD'192.121.102.11:25151'try:############################################]DDDDDDDDpoc#pass############################################]DDDDDDDcheck_res='vulornovul'############################################]DDDDDreturncheck_target,check_res1.web2.exceptExceptionase:returncheck_target,'err:%s'%str(e)defmain(target):#DDDDip,port=target・split(':')main_target,main_result=check(ip,port,5)result[main_target]=main_resultif__name__==__main__:#DDDDiflen(sys.argv)<2:#DDDDDDDDprint"#"*53,"\nusage:pythonthis.pytarget.txt\n","#"*10,"target_format:192.168.1.1:8080","#"*10sys.exit()#DDDDDDDDDDDDDDDDDtarget=open(sys.argv[1],"r+").read().splitlines()result={}forGenDictintarget:result[GenDict]=''#DDDDDDpool=Pool(50)pool.map(main,target)path=FILE(sys.argv[1])#######################################################################DDDDprintresult#DDDDDDDDtxtfinall_result=open(path.dirpath+'\CheckResult.txt',"a")#DDDDDDDfinall_result.write('ip,port,target,VulnRes\n')forfinall_textinresult:ip,port=finall_text.split(':')finall_result.write('%s,%s,%s,%s\n'%(ip,port,finall_text,result[finall_text]))3.flagflagcookiegetshellwebshellcookieflagwebshellwebshellwafdown40cookcknicookieccookelse{header('HTTP/1.1404NotFound');}cookie404,.server_conf.phpph■TVRLi 叭 g 遂刖二lecho4D4.1(?rror_reportiflgCO);lifindSCSCOOKIE［飞C:O;H+■checkBcpjsHdedeBDVWph■phpMiyAdmin划时间2010-10-2605:43:2018-06-2101:51:2018-00-0510:16:2017-11-2717:04:2D1S-04-2209:36:201S-06-0122:13:2017-08-2018-0^09Mil：.”webshtime大小•屋性D777077D7770777读POST/.Eerver_...