Code Monkey home page Code Monkey logo

tools's Introduction

tools

自己写的PYTHON小工具集(渗透测试工具集)
scanTitle.py                批量获取域名标题 scanTitle.py urls.txt 10 (线程)
shodan.py                   用shadan接口查询ip开放端口,shodan.py 127.0.0.1 支持C段shodan.py 127.0.0.0/24	
getKeyword.py               获取网页内容,生成关键字,和passdict项目可以一起用,生成密码字典;需要pypinyin,jieba,tldextract库
dns.py			    copy以前乌云的代码。加一个A记录xxxx.domain.com指向服务器ip,再加一个ns记录dnslog.domain.com,指向xxxx.domain.com。test.dnslog.domain.com
domain2ip.py		    使用socket.gethostbyname 查询域名对应ip。domain2ip.py domains.dict
portScan.py		    如果目标是windows且将所有未开放的端口全转发到一个端口上,NMAP将显示说有端口开放。portScan.py -t 127.0.0.1-100 -p 80,8000-10000 -n 100 
ip2domains.py		    使用virustotal.com的查询接口,实现ip反查域名,子域名查询。效果不错
t3scan.py		    T3协议扫描,建议使用64位python
nmap_oG.py		    对nmap -oG 的输出进行格式化127.0.0.1:80
weblogic_hash.py	    weblogic 6位随机路径名计算
chunked.py		    复制t00ls w8ayy写的分块传输脚本。chunked.py "id=1' and 1=1 and ''='"
ips2ipc.py		    ips2ipc.py /tmp/ip 把文件/tmp/ip内的独立IP转换成ip段,127.0.0.1;127.0.0.100 转换成127.0.0.1-100
brute.py 		    爆破工具,暂时只支持ssh
sub.py 			    多个接口查询子域名
iis_shortname_Scan.py 	    复制lijiejie的iis短文件名漏洞利用工具
tftp.py 		    python 实现tftp下载工具,UDP协议
aliyunECS.py 		    aliyun ECS命令执行并回显,需要先用pip安装aliyun sdk
fofa.py 		    简单的fofa搜索工具,需要配置key
redisWriteFile.py 	    redis写文件工具,支持python2,python3 会有点bug
mssqlC2H.py 		    mssql写文件时有中文路径,hex编码错误
socks5.py2 		    python2下无需三方库实现socks5代理,来原互联网
simple_http.py2 	    python2下无需三方库现实web服务与上传simple_http.py2	
cms.rb			    whatweb CMS指纹,放到plugins目录下
f5_CookieDecode.py	    f5 cookie解码为ip:port,python3 f5_CookieDecode.py 1677787402.36895.0000
npmSearch.py		    通过package.json,搜索不有注册的包,支持url或本地文件
bigData.py		    多个资产发现接口,查数据	
objectSid2SID.py	    取巧获取ldapsearch结果中objectSid和AllowedToActOnBehalfOfOtherIdentity包含的sid; python3 objectSid2SID.py [objectSid Base64 String] 
/dirScan		    目录扫描项目
/passdict 		    根据关键字生成密码

一些使用技巧

  • 查找cname解析 python3 sub.py baidu.com --sub|dnsprobe -r cname
  • 查询子域名信息
python3 sub.py baidu.com
python3 sub.py baidu.com --sub > baidu.com.sub
  • 扫描Title
python3 scanTitle.py baidu.com.sub
  • 子域名转IP
python3 domain2ip.py baidu.com.sub
提取IP正则
([0-9]{1,3}\.){3}[0-9]{1,3}
  • 单一的IP转成IP段
python3 ips2ipc.py baidu.com.ips > baidu.com.ipc
192.168.1.1
192.168.1.9
转成192.168.1-9
  • nmap -oG 扫描结果转换
nmap -n -T4 --open -iL baidu.com.ipc -oG baidu.com.nmap
python3 nmap_oG.py baidu.com.nmap

缺失的config.py

#https://www.virustotal.com 免费注册获取api key
vt_key="9************"

#https://securitytrails.com/ 免费注册获取api key
sec_keys = ["9************"]

#https://fofa.so/ 注册获取api key
fofa_email="9******@qq.com"
fofa_key="9************"

tools's People

Contributors

githubmaidou avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

tools's Issues

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.