HTTP 協定安全分析與 Python 程式設計實踐

import sys
import requests
from typing import Dict, Any

class HTTPHeaderAnalyzer:
    """HTTP 標頭分析工具類別"""
    
    def __init__(self, url: str):
        self.url = url
        self.response = None
        
    def send_request(self) -> bool:
        """發送 HTTP 請求並儲存回應"""
        try:
            self.response = requests.get(
                self.url,
                timeout=30,
                allow_redirects=True
            )
            self.response.raise_for_status()
            return True
        except requests.exceptions.ConnectionError:
            print(f"連線錯誤：無法連接到 {self.url}")
            return False
        except requests.exceptions.Timeout:
            print(f"請求超時：伺服器回應時間過長")
            return False
        except requests.exceptions.HTTPError as e:
            print(f"HTTP 錯誤：{e}")
            return False
        except requests.exceptions.RequestException as e:
            print(f"請求失敗：{e}")
            return False
    
    def display_response_headers(self):
        """顯示 HTTP 回應標頭"""
        if not self.response:
            return
            
        print("\n" + "="*60)
        print("HTTP 回應標頭資訊")
        print("="*60)
        
        for header, value in self.response.headers.items():
            print(f"{header:30s} : {value}")
            
        print(f"\n狀態碼: {self.response.status_code}")
        print(f"編碼方式: {self.response.encoding}")
        
    def display_request_headers(self):
        """顯示 HTTP 請求標頭"""
        if not self.response:
            return
            
        print("\n" + "="*60)
        print("HTTP 請求標頭資訊")
        print("="*60)
        
        request = self.response.request
        for header, value in request.headers.items():
            print(f"{header:30s} : {value}")
    
    def analyze(self):
        """執行完整的標頭分析流程"""
        if self.send_request():
            self.display_response_headers()
            self.display_request_headers()

def main():
    """主程式進入點"""
    if len(sys.argv) < 2:
        print(f"使用方式: {sys.argv[0]} <URL>")
        print(f"範例: {sys.argv[0]} https://www.example.com")
        sys.exit(1)
    
    url = sys.argv[1]
    analyzer = HTTPHeaderAnalyzer(url)
    analyzer.analyze()

if __name__ == "__main__":
    main()

import requests
from typing import Optional, Dict, Any
import json
from urllib.parse import urlparse

class RefererTester:
    """Referer 測試工具類別"""
    
    def __init__(self, target_url: str):
        self.target_url = target_url
        self.results = []
        
    def test_with_referer(self, referer: Optional[str] = None, 
                         description: str = "") -> Dict[str, Any]:
        """測試特定 Referer 值的請求"""
        headers = {}
        if referer:
            headers['Referer'] = referer
            
        try:
            response = requests.get(
                self.target_url,
                headers=headers,
                timeout=30,
                allow_redirects=False
            )
            
            result = {
                'description': description,
                'referer': referer if referer else '(未設定)',
                'status_code': response.status_code,
                'content_length': len(response.content),
                'redirect': response.is_redirect,
                'location': response.headers.get('Location', '')
            }
            
            self.results.append(result)
            return result
            
        except requests.exceptions.RequestException as e:
            error_result = {
                'description': description,
                'referer': referer if referer else '(未設定)',
                'error': str(e)
            }
            self.results.append(error_result)
            return error_result
    
    def run_comprehensive_test(self):
        """執行完整的 Referer 測試"""
        parsed_url = urlparse(self.target_url)
        base_url = f"{parsed_url.scheme}://{parsed_url.netloc}"
        
        test_cases = [
            (None, "無 Referer 標頭"),
            (base_url, "合法的同網域 Referer"),
            ("https://www.google.com", "來自搜尋引擎"),
            ("https://malicious-site.com", "可疑的外部來源"),
            (f"{base_url}/protected", "內部受保護頁面"),
        ]
        
        print("開始執行 Referer 測試...")
        print("="*70)
        
        for referer, description in test_cases:
            result = self.test_with_referer(referer, description)
            self.display_result(result)
            print("-"*70)
    
    def display_result(self, result: Dict[str, Any]):
        """顯示測試結果"""
        print(f"\n測試情境: {result['description']}")
        print(f"Referer: {result.get('referer', 'N/A')}")
        
        if 'error' in result:
            print(f"發生錯誤: {result['error']}")
        else:
            print(f"狀態碼: {result['status_code']}")
            print(f"回應大小: {result['content_length']} bytes")
            if result['redirect']:
                print(f"重新導向至: {result['location']}")
    
    def generate_report(self):
        """產生測試報告"""
        print("\n" + "="*70)
        print("Referer 測試摘要報告")
        print("="*70)
        
        for idx, result in enumerate(self.results, 1):
            print(f"\n測試 {idx}: {result['description']}")
            if 'error' not in result:
                print(f"  狀態: {'異常' if result['status_code'] >= 400 else '正常'}")
                print(f"  狀態碼: {result['status_code']}")

def main():
    import sys
    
    if len(sys.argv) < 2:
        print("使用方式: python referer_tester.py <URL>")
        print("範例: python referer_tester.py https://www.example.com/protected")
        sys.exit(1)
    
    target_url = sys.argv[1]
    tester = RefererTester(target_url)
    tester.run_comprehensive_test()
    tester.generate_report()

if __name__ == "__main__":
    main()

import requests
from http.cookiejar import CookieJar
from typing import Dict, List, Any
import time

class CookieAnalyzer:
    """Cookie 分析與管理工具"""
    
    def __init__(self):
        self.session = requests.Session()
        self.cookie_jar = CookieJar()
        self.session.cookies = self.cookie_jar
        
    def fetch_with_cookies(self, url: str, 
                          custom_cookies: Dict[str, str] = None) -> requests.Response:
        """發送帶有自訂 Cookie 的請求"""
        if custom_cookies:
            for name, value in custom_cookies.items():
                self.session.cookies.set(name, value)
        
        try:
            response = self.session.get(url, timeout=30)
            response.raise_for_status()
            return response
        except requests.exceptions.RequestException as e:
            print(f"請求失敗: {e}")
            return None
    
    def analyze_cookies(self, response: requests.Response):
        """分析回應中的 Cookie 設定"""
        if not response:
            return
        
        print("\n" + "="*70)
        print("Cookie 安全性分析")
        print("="*70)
        
        for cookie in response.cookies:
            print(f"\nCookie 名稱: {cookie.name}")
            print(f"Cookie 值: {cookie.value[:20]}..." if len(cookie.value) > 20 
                  else f"Cookie 值: {cookie.value}")
            print(f"網域: {cookie.domain}")
            print(f"路徑: {cookie.path}")
            print(f"過期時間: {cookie.expires if cookie.expires else 'Session結束'}")
            
            # 安全性屬性檢查
            security_flags = []
            if cookie.secure:
                security_flags.append("Secure")
            if cookie.has_nonstandard_attr('HttpOnly'):
                security_flags.append("HttpOnly")
            if cookie.has_nonstandard_attr('SameSite'):
                samesite = cookie.get_nonstandard_attr('SameSite')
                security_flags.append(f"SameSite={samesite}")
            
            if security_flags:
                print(f"安全屬性: {', '.join(security_flags)}")
            else:
                print("⚠️  警告: 未設定安全屬性")
                
            self.assess_cookie_security(cookie)
    
    def assess_cookie_security(self, cookie):
        """評估 Cookie 的安全性"""
        issues = []
        
        if not cookie.secure:
            issues.append("缺少 Secure 屬性,可能透過非加密連線傳輸")
        
        if not cookie.has_nonstandard_attr('HttpOnly'):
            issues.append("缺少 HttpOnly 屬性,容易遭受 XSS 攻擊")
        
        if not cookie.has_nonstandard_attr('SameSite'):
            issues.append("缺少 SameSite 屬性,可能遭受 CSRF 攻擊")
        
        if cookie.expires and cookie.expires > time.time() + (365 * 24 * 3600):
            issues.append("有效期限過長,增加被竊取的風險")
        
        if issues:
            print("\n安全性問題:")
            for issue in issues:
                print(f"  • {issue}")
        else:
            print("\n✓ Cookie 安全性設定良好")
    
    def demonstrate_cookie_manipulation(self, url: str):
        """示範 Cookie 操作技術"""
        print("\n開始 Cookie 操作示範...")
        print("="*70)
        
        # 第一次請求,不帶 Cookie
        print("\n1. 首次請求 (無 Cookie)")
        response1 = self.fetch_with_cookies(url)
        if response1:
            self.analyze_cookies(response1)
        
        # 第二次請求,使用伺服器設定的 Cookie
        print("\n2. 後續請求 (使用伺服器 Cookie)")
        response2 = self.fetch_with_cookies(url)
        if response2:
            print("已自動攜帶先前儲存的 Cookie")
        
        # 第三次請求,使用自訂 Cookie
        print("\n3. 使用自訂 Cookie 的請求")
        custom_cookies = {
            'session_id': 'custom_session_value_12345',
            'user_pref': 'zh-TW'
        }
        response3 = self.fetch_with_cookies(url, custom_cookies)
        if response3:
            print("已注入自訂 Cookie 值")

def main():
    import sys
    
    if len(sys.argv) < 2:
        print("使用方式: python cookie_analyzer.py <URL>")
        print("範例: python cookie_analyzer.py https://www.example.com")
        sys.exit(1)
    
    url = sys.argv[1]
    analyzer = CookieAnalyzer()
    analyzer.demonstrate_cookie_manipulation(url)

if __name__ == "__main__":
    main()