MQTT未授权访问及检测工具

from rich import print
from rich.panel import Panel
from rich.text import Text

panel = Panel(Text("大家好，我是丁永博。欢迎关注微信公众号：丁永博的成长日记！", justify="center"))
print(panel)
import socket
import paho.mqtt.client as mqtt
from concurrent.futures import ThreadPoolExecutor
# 配置参数
PORT = 1883
TIMEOUT = 5  # 超时时间(秒)
THREADS = 50  # 并发线程数
def check_mqtt(ip):
    """检测指定IP是否存在MQTT未授权访问"""
    try:
        # 先检查端口是否开放
        with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
            s.settimeout(TIMEOUT)
            if s.connect_ex((ip, PORT)) != 0:
                return None
        # 初始化MQTT客户端
        client = mqtt.Client()
        client.connect(ip, PORT, keepalive=TIMEOUT)

        # 设置回调函数
        result = {"status": False}
        def on_connect(client, userdata, flags, rc):
            result["status"] = (rc == 0)  # 0表示连接成功

        client.on_connect = on_connect
        client.loop_start()
        client.loop_stop()

        return ip if result["status"] else None
    except (mqtt.WebsocketConnectionError, 
            ConnectionRefusedError,
            TimeoutError):
        return None
    except Exception as e:
        print(f"检测{ip}时发生异常：{str(e)}")
        return None
def main():
    # 读取目标IP列表
    try:
        with open("1.txt", "r") as f:
            ips = [line.strip() for line in f if line.strip()]
    except FileNotFoundError:
        print("错误：1.txt文件不存在！")
        return
    # 使用线程池并发检测
    vulnerable = []
    with ThreadPoolExecutor(max_workers=THREADS) as executor:
        results = executor.map(check_mqtt, ips)
        for ip, status in zip(ips, results):
            if status:
                print(f"[+] 发现漏洞：{ip}")
                vulnerable.append(ip)
            else:
                print(f"[-] 安全：{ip}")
    # 保存结果
    if vulnerable:
        with open("2.txt", "w") as f:
            f.write("\n".join(vulnerable))
        print(f"发现{len(vulnerable)}个漏洞，结果已保存到2.txt")
    else:
        print("未发现MQTT未授权访问漏洞")
if __name__ == "__main__":
    # 检查依赖库
    try:
        import paho.mqtt
    except ImportError:
        print("请先安装paho-mqtt：pip install paho-mqtt")
        exit(1)

    main()