Python 伺服器資訊收集技術

import shodan

# 初始化Shodan API
api = shodan.Shodan("YOUR_SHODAN_API_KEY")

# 搜尋特定關鍵字
results = api.search("apache")

# 輸出搜尋結果
for result in results["matches"]:
    print(result["ip_str"])
    print(result["data"])

#!/usr/bin/env python
import requests
import os

SHODAN_API_KEY = os.environ['SHODAN_API_KEY']
ip = '1.1.1.1'

def ShodanInfo(ip):
    try:
        result = requests.get(f"https://api.shodan.io/shodan/host/{ip}?key={SHODAN_API_KEY}&minify=True").json()
    except Exception as exception:
        result = {"error": "Information not available"}
    return result

print(ShodanInfo(ip))

#!/usr/bin/python
import shodan
import os

SHODAN_API_KEY = os.environ['SHODAN_API_KEY']
shodan = shodan.Shodan(SHODAN_API_KEY)

try:
    resultados = shodan.search('nginx')
    print("results :", resultados.items())
except Exception as exception:
    print(str(exception))

#!/usr/bin/env python
import shodan
import argparse
import socket
import sys
import os

SHODAN_API_KEY = os.environ['SHODAN_API_KEY']
api = shodan.Shodan(SHODAN_API_KEY)

# 定義命令列引數
parser = argparse.ArgumentParser(description='Shodan search')
parser.add_argument("--target", dest="target", help="target IP / domain", required=None)
parser.add_argument("--search", dest="search", help="search", required=None)
parsed_args = parser.parse_args()

# 根據引數執行不同操作
if len(sys.argv) > 1 and sys.argv[1] == '--search':
    try:
        results = api.search(parsed_args.search)
        print('Results: %s' % results['total'])
        for result in results['matches']:
            print('IP: %s' % result['ip_str'])
            print(result['data'])
    except shodan.APIError as exception:
        print('Error: %s' % exception)

if len(sys.argv) > 1 and sys.argv[1] == '--target':
    try:
        hostname = socket.gethostbyname(parsed_args.target)
        results = api.host(hostname)
        print("""
IP: %s
Organization: %s
Operating System: %s
""" % (results['ip_str'], results.get('org', 'n/a'), results.get('os', 'n/a')))
        for item in results['data']:
            print("""Port: %s Banner: %s""" % (item['port'], item['data']))
    except shodan.APIError as exception:
        print('Error: %s' % exception)

import shodan
import requests
import os

SHODAN_API_KEY = os.environ['SHODAN_API_KEY']
api = shodan.Shodan(SHODAN_API_KEY)
domain = 'www.python.org'

dnsResolve = f"https://api.shodan.io/dns/resolve?hostnames={domain}&key={SHODAN_API_KEY}"
try:
    resolved = requests.get(dnsResolve)
    hostIP = resolved.json()[domain]
    host = api.host(hostIP)
    # 處理host變數中的資訊
except Exception as e:
    print(f"An error occurred: {e}")

import shodan

SHODAN_API_KEY = "YOUR_SHODAN_API_KEY"
shodanApi = shodan.Shodan(SHODAN_API_KEY)

try:
    host = shodanApi.host('TARGET_IP_ADDRESS')
    print("IP: %s" % host['ip_str'])
    print("Organization: %s" % host.get('org', 'n/a'))
    print("Operating System: %s" % host.get('os', 'n/a'))
    for item in host['data']:
        print("Port: %s" % item['port'])
        print("Banner: %s" % item['data'])
except shodan.APIError as e:
    print('Error: %s' % e)

import shodan
import os

SHODAN_API_KEY = os.environ['SHODAN_API_KEY']
shodanApi = shodan.Shodan(SHODAN_API_KEY)

results = shodanApi.search("port: 21 Anonymous user logged in")
print("找到的主機數量: " + str(len(results['matches'])))

for result in results['matches']:
    if result['ip_str'] is not None:
        print(result['ip_str'])

from pybinaryedge import BinaryEdge

key = 'BINARY_EDGE_API_KEY'
binaryEdge = BinaryEdge(key)
search_domain = 'www.python.org'
results = binaryEdge.host_search(search_domain)

for ip in results['events']:
    print("%s" % (ip['target']['ip']))

import socket
import argparse
import re

parser = argparse.ArgumentParser(description='取得伺服器banner')
# 主要引數
parser.add_argument("--target", dest="target", help="目標IP", required=True)
parser.add_argument("--port", dest="port", help="埠號", type=int, required=True)
parsed_args = parser.parse_args()

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.connect((parsed_args.target, parsed_args.port))
sock.settimeout(2)

query = "GET / HTTP/1.1\nHost: "+parsed_args.target+"\n\n"
http_get = bytes(query,'utf-8')
data = ''

with open('vulnbanners.txt', 'r') as file:
    vulnbanners = file.read()

try:
    sock.sendall(http_get)
    data = sock.recvfrom(1024)
    data = data[0]
    print(data)
    
    #### 內容解密：
    # 這段程式碼首先建立了一個socket物件，並連線到指定的目標IP和埠號。
    # 然後，它發送了一個HTTP GET請求到伺服器，並接收了伺服器的回應。
    # 回應儲存在data變數中，並被列印出來。

    headers = data.splitlines()
    for header in headers:
        try:
            if re.search('Server:', str(header)):
                print("*****"+header.decode("utf-8")+"*****")
            else:
                print(header.decode("utf-8"))
        except Exception as exception:
            pass
    
    #### 內容解密：
    # 這段程式碼將回應的headers分割成單獨的行，並遍歷每一行。
    # 如果某一行包含'Server:'，則它會被特別標記並列印出來。
    # 其他行則直接被列印出來。

    for vulnbanner in vulnbanners.splitlines():
        if vulnbanner.strip() in str(data.strip().decode("utf-8")):
            print('發現易受攻擊的伺服器！ ', vulnbanner)
            print('目標： '+str(parsed_args.target))
            print('埠號： '+str(parsed_args.port))
    
    #### 內容解密：
    # 這段程式碼檢查伺服器的回應中是否包含已知的易受攻擊的banner。
    # 如果發現，則會列印出警告訊息，包括目標IP、埠號和易受攻擊的banner。

except socket.error:
    print ("Socket錯誤", socket.errno)
finally:
    sock.close()

#### 內容解密：
# 最後，無論是否發生錯誤，socket都會被關閉，以釋放資源。