漏洞银行1000种姿势绕过软WAF

漏洞银行1000种姿势绕过软WAF

漏洞银行丨“1000种姿势”绕过软WAF –Python Fuzz脚本编写— V@1n3R丨咖面33期

QQ群：397745473

youtube 视频地址： https://www.youtube.com/watch?v=q6vWDLQ_1Hg
标题：漏洞银行丨“1000种姿势”绕过软WAF --Python Fuzz脚本编写— V@1n3R丨咖面33期

软件下载：
http://public.xp.cn/upgrades/phpStudy20161103.zip
https://www.lz1y.cn/

fuzz 脚本:

在本地搭建安全狗测试fuzz他的正则

更多特殊字符测试

使用sqlmap进行测试

Sqlmap扩展—外部IP代理池实现

用sqlmap加代理进行并用brup查看payload

原文：https://blog.csdn.net/nzjdsds/article/details/77389212
搜关键词：sqlmap代理池扩展脚本

# -*-coding:utf-8-*-

"""

ayou

"""

importsocket

fromsocketimporterror

importthreading

importrandom

importtime

 

localtime=time.asctime(time.localtime(time.time()))

 

classProxyServerTest():

    def__init__(self,proxyip):

        #本地socket服务

        self.ser=socket.socket(socket.AF_INET,socket.SOCK_STREAM)

        self.proxyip=proxyip

 

    defrun(self):

        try:

            #本地服务IP和端口

            self.ser.bind(('127.0.0.1',9999))

            #最大连接数

            self.ser.listen(5)

        excepterrorase:

            print("[-]The local service : "+str(e))

            return"[-]The local service : "+str(e)

        whileTrue:

            try:

                #接收客户端数据

                client,addr=self.ser.accept()

                print('[*]accept %s connect'%(addr,))

                data=client.recv(1024)

                ifnotdata:

                    break

                print('[*'+localtime+']: Accept data...')

            excepterrorase:

                print("[-]Local receiving client : "+str(e))

                return"[-]Local receiving client : "+str(e)

            whileTrue:

                    #目标代理服务器，将客户端接收数据转发给代理服务器

                    mbsocket=socket.socket(socket.AF_INET,socket.SOCK_STREAM)

                    iplen=len(self.proxyip)      

                    proxyip=self.proxyip[random.randint(0,iplen-1)]

                    print("[!]Now proxy ip:"+str(proxyip))

                    prip=proxyip[0]

                    prpo=proxyip[1]

                    try:

                        mbsocket.settimeout(3)

                        mbsocket.connect((prip,prpo))

                    except:

                        print("[-]RE_Connect...")

                        continue

                    break

#                   except :

#                       print("[-]Connect failed,change proxy ip now...")

  #                      pass

            try:    

                mbsocket.send(data)

            excepterrorase:

                print("[-]Sent to the proxy server : "+str(e))

                return"[-]Sent to the proxy server : "+str(e)

            

            whileTrue:

                try:

                    #从代理服务器接收数据，然后转发回客户端

                    data_1=mbsocket.recv(1024)

                    ifnotdata_1:

                        break

                    print('[*'+localtime+']: Send data...')

                    client.send(data_1)

                exceptsocket.timeoutase:

                    print(proxyip)

                    print("[-]Back to the client : "+str(e))

                    continue

            #关闭连接

            client.close()

            mbsocket.close()

 

defLoadips():

    print("[*]Loading proxy ips..")

    ip_list=[]

    ip=['ip','port']

    withopen("ips.txt")asips:

        lines=ips.readlines()

    forlineinlines:

        ip[0],ip[1]=line.strip().split(":")

        ip[1]=eval(ip[1])

        nip=tuple(ip)

        ip_list.append(nip)

    returnip_list

    

defmain():

    print('''*Atuhor : V@1n3R.

*Blog :http://www.Lz1y.cn

*date: 2017.7.17

*http://www.Lz1y.cn/wordpress/?p=643

    

    

    

    

 

                                

                         __     __    _       _____ ____    

                         \ \   / /_ _/ |_ __ |___ /|  _ \  

                          \ \ / / _` | | '_ \  |_ \| |_) |  

                           \ V / (_| | | | | |___) |  _ < _

                            \_/ \__,_|_|_| |_|____/|_| \_(_)

                                    

                                    

                                            

                                            

                                            

                                            

                                            

    ''')

    ip_list=Loadips()    

#   ip_list = [('118.89.148.92',8088)]

#   ip_list = tuple(ip_list)

    try:

        pst=ProxyServerTest(ip_list)

        #多线程

        t=threading.Thread(target=pst.run,name='LoopThread')

        print('[*]Waiting for connection...')

        #关闭多线程

        t.start()

        t.join()

    exceptExceptionase:

        print("[-]main : "+str(e))

        return"[-]main : "+str(e)

 

if__name__=='__main__':

    main()

QQ群：397745473