用shell脚本批量进行xss跨站攻击请求

由于执行的xss攻击请求他多了，初步估计要执行83次，而且还要执行3篇，如果手工一个一个去执行，说出去，我还配叫自动化大师吗；

有鉴于此，边打算自己编写一个脚本进行批量执行；

而短脚本的编写，非shell莫属，想到做到；

首先附上xss跨站攻击的请求报文：

POST /web/show.asp?id= HTTP/1.1

Host: 192.168..xxx

Connection: close

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, */*

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)

Content-Type: application/json

Content-Length: 25

{

    "11111": " onabort ="

}

将onabort换成如下攻击特征：

onactivate

onafterprint

onbeforeactivate

onbeforeprint

onbeforeunload

onblur

oncancel

oncanplaythrough

oncanplay

onchange

onclick

oncontextmenu

oncopy

oncuechange

oncut

ondblclick

ondragdrop

ondragend

ondragenter

ondragleave

ondragover

ondragstart

ondrag

ondrop

ondurationchange

onemptied

onended

onerror

onfocus

onformchange

onforminput

onhashchange

oninput

oninvalid

onkeydown

onkeypress

onkeyup

onloadeddata

onloadedmetadata

onloadstart

onload

onmessage

onmousedown

onmouseenter

onmouseleave

onmousemove

onmouseout

onmouseover

onmouseup

onmousewheel

onmove

onoffline

ononline

onpagehide

onpageshow

onpaste

onpause

onplaying

onplay

onpopstate

onprogress

onpropertychange

onratechange

onreadystatechange

onreset

onresize

onscroll

onsearch

onseeked

onseeking

onselect

onshow

onstalled

onstart

onstorage

onsubmit

onsuspend

ontimeupdate

ontoggle

onunload

onvolumechange

onwaiting

onwheel

看到没有如果一个一个执行，我的天，这要猴年马月才能搞完！

话不多说，附上shlle脚本代码：

#!/bin/bash

echo "循环开始开始执行"

for j in $(cat rules3.txt)

do

echo " 注意的是，json数据里变量要用 '' 括起"

 # curl complete post json post 请求

 # curl -i -X POST -H "'Content-type':'application/x-www-form-urlencoded', 'charset':'utf-8', 'Accept': 'text/plain'" -d 'json_data={...}' url

 curl -i -X POST -H "'Content-type':'application/json'" -d  $j  http://192.168.26.213/

done

echo "循环结束"

其中rules3.txt文件内容为：

‘json_data={"":"onactivate"}'/

‘json_data={"":"onafterprint="}'/

‘json_data={"":"onbeforeactivate ="}'/

‘json_data={"":"onbeforeunload="}'/

‘json_data={"":"onblur="}'/

‘json_data={"":"oncancel="}'/

‘json_data={"":"oncanplaythrough="}'/

‘json_data={"":"oncanplay="}'/

‘json_data={"":"onchange="}'/

‘json_data={"":"onclick="}'/

‘json_data={"":"oncontextmenu="}'/

‘json_data={"":"oncopy="}'/

‘json_data={"":"oncuechange="}'/

‘json_data={"":"oncut="}'/

‘json_data={"":"ondblclick="}'/

‘json_data={"":"ondragdrop="}'/

‘json_data={"":"ondragend="}'/

‘json_data={"":"onondragenter="}'/

‘json_data={"":"ondragleave="}'/

‘json_data={"":"ondragstart="}'/

‘json_data={"":"ondrag="}'/

‘json_data={"":"ondrop="}'/

‘json_data={"":"ondurationchange="}'/

‘json_data={"":"onemptied="}'/

‘json_data={"":"onerror="}'/

‘json_data={"":"onfocus="}'/

‘json_data={"":"onformchange="}'/

‘json_data={"":"onforminput="}'/

‘json_data={"":"onhashchange="}'/

‘json_data={"":"oninput="}'/

‘json_data={"":"onkeydown="}'/

‘json_data={"":"onkeypress="}'/

‘json_data={"":"onkeyup="}'/

‘json_data={"":"onloadeddata="}'/

‘json_data={"":"onloadedmetadata="}'/

‘json_data={"":"onloadstart="}'/

‘json_data={"":"onload="}'/

‘json_data={"":"onmessage="}'/

‘json_data={"":"onmousedown="}'/

‘json_data={"":"onmouseenter="}'/

‘json_data={"":"onmouseleave="}'/

‘json_data={"":"onmousemove="}'/

‘json_data={"":"onmouseout="}'/

‘json_data={"":"onmouseover="}'/

‘json_data={"":"onmousewheel="}'/

‘json_data={"":"onmove="}'/

‘json_data={"":"onoffline="}'/

‘json_data={"":"ononline="}'/

‘json_data={"":"onpagehide="}'/

‘json_data={"":"onpageshow="}'/

‘json_data={"":"onpaste="}'/

‘json_data={"":"onpause="}'/

‘json_data={"":"onplaying="}'/

‘json_data={"":"onplay="}'/

‘json_data={"":"onpopstate="}'/

‘json_data={"":"onprogress="}'/

‘json_data={"":"onpropertychange="}'/

‘json_data={"":"onreset="}'/

‘json_data={"":"onresize="}'/

‘json_data={"":"onscroll="}'/

‘json_data={"":"onsearch="}'/

‘json_data={"":"onseeked="}'/

‘json_data={"":"onseeking="}'/

‘json_data={"":"onselect="}'/

‘json_data={"":"onshow="}'/

‘json_data={"":"onstalled="}'/

‘json_data={"":"onstart="}'/

‘json_data={"":"onstorage="}'/

‘json_data={"":"onsubmit="}'/

‘json_data={"":"onsuspend="}'/

‘json_data={"":"ontimeupdate="}'/

‘json_data={"":"ontoggle="}'/

‘json_data={"":"onunload="}'/

‘json_data={"":"onvolumechange="}'/

‘json_data={"":"onwaiting="}'/

‘json_data={"":"onwheel="}'/

‘json_data={"":"onbeforeprint"}'/

‘json_data={"":"onbeforeactivate ="}'/

‘json_data={"":"onended"}'/

‘json_data={"":"oninvalid"}'/

‘json_data={"":"onmouseup"}'/

‘json_data={"":"ondratechange"}'/

‘json_data={"":"onreadystatechange"}'/

注意

curl -i -X POST -H "'Content-type:'application/json'" -d " {'xxx':'sss'}" url

结果为：

改成这个格式后：

curl -i -X POST -H "'Content-type':'application/x-www-form-urlencoded', 'charset':'utf-8', 'Accept': 'text/plain'" -d 'json_data={...}' url

想拥有阿里云服务器的可以登陆此网站哦：https://promotion.aliyun.com/ntms/yunparter/invite.html?userCode=qqwovx6h

巴特西

用shell脚本批量进行xss跨站攻击请求

最新文章

热门文章