使用python编写poc扫描脚本

import requests
import urllib3

引入所需模块

urllib3.disable_warnings()

关闭ssl警告

def s(url):
    try:
        res = requests.get(url + '''POC''', verify=False)

使用requests模块进行get请求

if "页面输出的内容" in res.text:

进行匹配

 print(f'[√]存在漏洞：{url}')

如果匹配成功则输出存在漏洞

with open('exp_ok.txt', 'a') as f:
        f.write('复现地址：'shell_url + '\n')

输出存在漏洞的url并保存到当前目录的exp_ok.txt内
except Exception as e:
print(f'[!]发生异常: {e}')

存在异常输出提示

if __name__ == '__main__':
    with open('url.txt','r') as f:

打开url.txt

for url in f:

读取url

 a = url.strip('\n\r')

strip同时去掉左右两边的空格

  s(a)

开始执行扫描

成品代码

import requests
import urllib3
urllib3.disable_warnings()

def s(url):
    try:
        res = requests.get(url + '''POC''', verify=False)
        if "页面输出的内容" in res.text:
            print(f'[√]存在漏洞：{url}')
            with open('exp_ok.txt', 'a') as f:
                f.write('复现地址：'shell_url + '\n')
    except Exception as e:
        print(f'[!]发生异常: {e}')

if __name__ == '__main__':
    with open('url.txt','r') as f:
        for url in f:
            a = url.strip('\n\r')
            s(a)

使用教程

python exp.py url.txt