深度渗透测试年末活动

import requests

def scan_website(url):
    try:
        response = requests.get(url)
        if response.status_code == 200:
            print(f"网站 {url} 可访问")
            # 进一步检查常见漏洞
            check_xss(url)
            check_sql_injection(url)
        else:
            print(f"网站 {url} 不可访问，状态码: {response.status_code}")
    except Exception as e:
        print(f"扫描 {url} 时发生错误: {e}")

def check_xss(url):
    # 简单的XSS漏洞检查
    payload = "<script>alert('XSS')</script>"
    test_url = f"{url}/search?q={payload}"
    response = requests.get(test_url)
    if payload in response.text:
        print(f"发现XSS漏洞: {url}")
    else:
        print(f"未发现XSS漏洞: {url}")

def check_sql_injection(url):
    # 简单的SQL注入漏洞检查
    payload = "' OR '1'='1"
    test_url = f"{url}/user?id={payload}"
    response = requests.get(test_url)
    if "admin" in response.text:
        print(f"发现SQL注入漏洞: {url}")
    else:
        print(f"未发现SQL注入漏洞: {url}")

# 示例调用
scan_website("http://example.com")