我正在用python做一个SSRF扫描器,但是我对python中的'sys.argv‘不太了解。以下是我的代码,当我运行(Python3)时它不工作:
class targets:
def __init__(self, url, ip, port, method, param, error):
self.url = url
self.ip = ip
self.port = port
self.method = method
self.param = param
self.er = error
def scan(target):
print("Success!")
print(target.url)
print(target.method)
print(target.ip)
for carg in sys.argv:
target = targets('', '', '', '', '', "Please enter a valid command. If you don't know how to use it, enter '-help'")
if "-u" in carg:
argnum = sys.argv.index(carg)
argnum += 1
target.url = sys.argv[argnum]
if "-g" in carg:
argnum += 1
target.method = "g"
if "-i" in carg:
argnum = sys.argv.index(carg)
argnum += 1
target.ip = sys.argv[argnum]
if "-pt" in carg:
argnum = sys.argv.index(carg)
argnum += 1
target.port = sys.argv[argnum]
if "-p" in carg:
if not "-pa" in carg:
print("Please enter the parameters of request(POST)")
quit
argnum += 1
target.method = "p"
if "-i" in carg:
argnum = sys.argv.index(carg)
argnum += 1
target.ip = sys.argv[argnum]
if "-p" in carg:
argnum = sys.argv.index(carg)
argnum += 1
target.port = sys.argv[argnum]
else:
print(target.er)
quit
target.scan()
elif carg == "-help":
tuto = open("tutorial.dat", "r")
tuto.read()
tuto.close
print(tuto)
else:
print(target.er)运行此代码后:ssrf.py -u google.com -g -i 123.123.123.123
我收到了这封信:
Please enter a valid command. If you don't know how to use it, enter '-help'
Please enter a valid command. If you don't know how to use it, enter '-help'
Success!
google.com
Please enter a valid command. If you don't know how to use it, enter '-help'
Please enter a valid command. If you don't know how to use it, enter '-help'
Please enter a valid command. If you don't know how to use it, enter '-help'
Please enter a valid command. If you don't know how to use it, enter '-help'这不是我在等待的东西:
Success!
google.com
g
123.123.123.123有人能告诉我这段代码有什么问题吗?(如果这是一个愚蠢的问题,我很抱歉,如果英语不好,我很抱歉)
发布于 2019-11-16 14:35:06
sys.argv不是完成这项任务的合适工具。使用argparse。Python文档中包含了大量关于使用sys和argparse的示例
示例:
#pars.py
import argparse
parser = argparse.ArgumentParser('SSRF',
description='SSRF scanner description')
parser.add_argument('-u','--url', metavar='url',
type=str, required=True, help='url to scan' )
parser.add_argument('-i','--ip', metavar='ip',
type=str, required=True, help='ip address' )
parsed = parser.parse_args()
# do something parsed.url or parsed.ip
print(parsed.url, parsed.ip)
print(parsed)
# run
#>>> python pars.py --help
#>>> python pars.py -i 133.333.3 -u hello.com
#>>> python pars.py --url world.com --ip 123.45.6https://stackoverflow.com/questions/58887991
复制相似问题