如何使用Python3编写Redis未授权访问检测脚本?
作者:WarmHope
时间:2023-04-29
浏览:2
Redis Assistant
Redis Assistant 是一款为Redis设计的高效可视化管理与监控工具,提供多种操作模式,高效处理服务器数据。日常使用里的持续防护和信息管理会更突出,适合把安全控制放进长期使用流程中的场景。
¥19
Windows/macOS/Linux
2026-08-22
importsysimportgetoptimportsocketdefget_target():opts,args=getopt.getopt(sys.argv[1:],'-i:-p:-h')#print(opts)foropt_name,opt_valueinopts:ifopt_name=='-h':print('[*]Thisishelpinformation[*]n''[*]-i+vulnerable-ip[*]n''[*]
本文目录
import sys
import getopt
import socket
def get_target():
opts, args = getopt.getopt(sys.argv[1:], '-i:-p:-h')
# print(opts)
for opt_name, opt_value in opts:
if opt_name == '-h':
print('[*]This is help information [*]n'
'[*]-i + vulnerable-ip [*]n'
'[*]-p + vulnerable-port [*]n'
'[*]Example:python3 -i 127.0.0.1 -p 6379[*]n')
if opt_name in ('-i', ):
ip = opt_value
if opt_name in ('-p', ):
port = opt_value
return ip, port
def passwd_dict():
passwd = ['redis@123', 'Redis@123', 'Passw0rd', '123456']
return passwd
def main(ip, port, passwd):
print("[*]Redis Unauthorized and Weak Password Detection [*]n"
"[*]By: Zh1z3ven [*]n"
"[*]Blog: https://www.cnblogs.com/Zh1z3ven/ [*]n")
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((ip, int(port)))
send_data = 'INFOrn'
s.send(send_data.encode())
res = s.recv(1024)
response = bytes.decode(res)
# print(response)
if 'redis_version' in response:
result = '[!]Vulnerable {0}:{1} 存在未授权访问 [!]'.format(ip, port)
print(result)
return result
elif 'NOAUTH' in response:
for item in passwd:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((ip, int(port)))
send_data = 'AUTH {0}rn'.format(item)
s.send(send_data.encode())
res = s.recv(1024)
response = bytes.decode(res)
# print(response)
if '+OK' in response:
result = '[!]Vulnerable: {0}:{1} 存在弱口令{2} [!]'.format(ip, port, item)
print(result)
return result
else:
result = '[*] 不存在未授权及弱口令 [*]'
print(result)
return result
if __name__ == '__main__':
ip, port = get_target()
passwd = passwd_dict()
main(ip, port, passwd)
作者最新文章
sql条件判断字符串不包含某个字符串的方法详解
2026-10-13 17:39
漫蛙漫画官网
2026-10-13 13:19
漫蛙官网入口免费下载安装最新版
2026-10-13 13:18
漫蛙漫画登录页面在哪
2026-10-13 13:15
Photoshop自定义图层样式的保存、导入与管理技巧
2026-10-05 14:17
热门文章
更多
精品专题
更多
Mac软件
更多
WINDOWS
更多










































