jetty bleed漏洞利用工具

两个exp:

https://github.com/AppSecConsulting/Pentest-Tools/blob/master/jetty-bleed.py

https://github.com/GDSSecurity/Jetleak-Testing-Script

 

from subprocess import Popen

def runexp(filename,t):    
    print '----------------------------------'
    print "run " + filename + '.....'
    cmd =  pythondir + '  ' +  filename  + '   ' + t 
    try:
        proc = Popen(cmd.split(),shell=False).wait()
    except Exception,e:
        print e
        pass

if __name__ == "__main__":		
f = open('target.txt','r')
pythondir =  '/home/leo/Desktop/envxlcscan/bin/python'
for line in f:
    line =line.strip()
    
    runexp('jetty-bleed.py',line)
    runexp('jetleak_tester.py',line)


f.close()