Boofuzz实战

cd /usr/local
mkdir boofuzz && cd boofuzz
python3 -m venv env

source env/bin/activate
pip install -U pip setuptools
pip install -i https://pypi.tuna.tsinghua.edu.cn/simple boofuzz
source env/bin/activate

cd /usr/local
mkdir boofuzz-item
cd boofuzz-item
git clone https://github.com/jtpereyda/boofuzz.git
cd boofuzz

vim ftp-example.py

from boofuzz import *

def main():
  session = Session(target= Target(connection=SocketConnection("127.0.0.1", 21, proto='tcp')))
  s_initialize("user")
  s_string("USER")
  s_delim(" ")
  s_string("anonymous")
  s_static("lrln")
  s_initialize("pass")
  s_string("PASS")
  s_delim(" ")
  s_string("james")
  s_static("lrln")
  s_initialize("stor")
  s_string("STOR")
  s_delim(" ")
  s_string("AAAA")
  s_static("lrln")
  s_initialize("retr")
  s_string( "RETR")
  s_delim(" ")
  s_string("AAAA")
  s_static("\r\n")
  session.connect(s_get("user"))
  session.connect(s_get("user"), s_get("pass"))
  session.connect(s_get("pass"), s_get("stor") )
  session.connect(s_get("pass"), s_get("retr") )
  session.fuzz()
if __name__ == "__main__":
	main()
  

python3 ftp-example.py