Python 实现Unix/Zip密码破解机

Python 实现Unix/Zip密码破解机的过程包括导入必要的库和模块，使用zipfile库打开ZIP文件并尝试不同的密码进行解压，同时使用crypt模块与Unix系统中存储的密码进行比较以破解用户密码。

实现简单探测：使用socket模块，connect()方法建立与指定IP和端口的网络连接；revc(1024)方法将读取套接字中接下来的1024B数据

import socket
import syssocket.setdefaulttimeout(2)
s=socket.socket()
s.connect(('192.168.1.1',21))
ans=s.recv(1024)
print(ans)

通过函数实现：通过def()关键字定义，示例中定义扫描FTP banner信息的函数

import socketdef retBanner(ip,port):try:socket.setdefaulttimeout(2)s = socket.socket()s.connect((ip,port))banner = s.recv(1024)return bannerexcept:returndef checkVulns(banner):if 'vsFTPd' in banner:print '[+] vsFTPd is vulnerable.'elif 'FreeFloat Ftp Server' in banner:print '[+] FreeFloat Ftp Server is vulnerable.'else:print '[-] FTP Server is not vulnerable.'returndef main():ips = ['10.10.10.128','10.10.10.160']port = 21banner1 = retBanner(ips[0],port)if banner1:print '[+] ' + ips[0] + ": " + banner1.strip('\n')checkVulns(banner1)banner2 = retBanner(ips[1],port)if banner2:print '[+] ' + ips[1] + ": " + banner2.strip('\n')checkVulns(banner2)if __name__ == '__main__':main()

迭代实现：迭代探测

import socketdef retBanner(ip,port):try:socket.setdefaulttimeout(2)s = socket.socket()s.connect((ip,port))banner = s.recv(1024)return bannerexcept:returndef checkVulns(banner):if 'vsFTPd' in banner:print '[+] vsFTPd is vulnerable.'elif 'FreeFloat Ftp Server' in banner:print '[+] FreeFloat Ftp Server is vulnerable.'else:print '[-] FTP Server is not vulnerable.'returndef main():portList = [21,22,25,80,110,443]ip = '10.10.10.128'for port in portList:banner = retBanner(ip,port)if banner:print '[+] ' + ip + ':' + str(port) + '--' + bannerif port == 21:checkVulns(banner)if __name__ == '__main__':main()

OS模块： os.path.isfile()检查该文件是否存在  os.access()判断当前用户是否有权限读取该文件

import sys
import os
if len(sys.argv) == 2:filename = sys.argv[1]if not os.path.isfile(filename):print '[-] ' + filename + ' does not exit.'exit(0)if not os.access(filename,os.R_OK):print '[-] ' + filename + ' access denied.'exit(0)print '[+] Reading From: ' + filename

整合上面的代码

import socket
import sys
import osdef retBanner(ip,port):try:socket.setdefaulttimeout(2)s = socket.socket()s.connect((ip,port))banner = s.recv(1024)return bannerexcept:returndef checkVulns(banner,filename):f = open(filename, 'r')for line in f.readlines():if line.strip('\n') in banner:print '[+] Server is vulnerable: ' + banner.strip('\n')def main():if len(sys.argv) == 2:filename = sys.argv[1]if not os.path.isfile(filename):print '[-] ' + filename + ' does not exit.'exit(0)if not os.access(filename,os.R_OK):print '[-] ' + filename + ' access denied.'exit(0)print '[+] Reading From: ' + filenameelse:print '[-] Usage: ' + str(sys.argv[0]) + ' 'exit(0)portList = [21,22,25,80,110,443]ip = '10.10.10.128'for port in portList:banner = retBanner(ip,port)if banner:print '[+] ' + ip + ':' + str(port) + '--' + bannerif port == 21:checkVulns(banner,filename)if __name__ == '__main__':main()

Unix口令破解机: 这段代码通过分别读取两个文件，一个为加密口令文件，另一个为用于猜测的字典文件。在testPass()函数中读取字典文件，并通过crypt.crypt()进行加密，其中需要一个明文密码以及两个字节的盐，然后再用加密后的信息和加密口令进行比较查看是否相等即可。

#!/usr/bin/python
#coding=utf-8
import cryptdef testPass(cryptPass):salt = cryptPass[0:2]dictFile = open('dictionary.txt','r')for word in dictFile.readlines():word = word.strip('\n')cryptWord = crypt.crypt(word,salt)if cryptWord == cryptPass:print '[+] Found Password: ' + word + "\n"returnprint '[-] Password not Found.\n'returndef main():passFile = open('passwords.txt')for line in passFile.readlines():if ":" in line:user = line.split(':')[0]cryptPass = line.split(':')[1].strip(' ')print '[*] Cracking Password For : ' + usertestPass(cryptPass)if __name__ == '__main__':main()

Zip文件口令破解机: 主要使用zipfile库的extractall()方法，其中pwd参数指定密码

import zipfile
import optparse
from threading import Threaddef extractFile(zFile,password):try:zFile.extractall(pwd=password)print '[+] Fonud Password : ' + password + '\n'except:passdef main():parser = optparse.OptionParser("[*] Usage: ./unzip.py -f  -d ")parser.add_option('-f',dest='zname',type='string',help='specify zip file')parser.add_option('-d',dest='dname',type='string',help='specify dictionary file')(options,args) = parser.parse_args()if (options.zname == None) | (options.dname == None):print parser.usageexit(0)zFile = zipfile.ZipFile(options.zname)passFile = open(options.dname)for line in passFile.readlines():line = line.strip('\n')t = Thread(target=extractFile,args=(zFile,line))t.start()if __name__ == '__main__':main()

本文来自互联网用户投稿，文章观点仅代表作者本人，不代表本站立场，不承担相关法律责任。如若转载，请注明出处。 如若内容造成侵权/违法违规/事实不符，请点击【内容举报】进行投诉反馈！