【问题标题】:How to fix syntax for fuzzing network layer on Sulley fuzzer如何在 Sulley fuzzer 上修复模糊网络层的语法
【发布时间】:2019-09-27 11:15:54
【问题描述】:

我正在关注https://www.slideshare.net/htbridge/fuzzing-an-introduction-to-sulley-framework 的代码。

下面是 kickfuzz.py 的代码。我遇到了 kickfuzz.py 的无效语法

from sulley import *
from requests import httpcallAX

sess=sessions.session(session_filename="audits/http.session")
target = sessions.target("192.168.175.129", 30888)
target.netmon = pedrpc.client("192.168.175.129", 26001)
target.procmon = pedrpc.client("192.168.175.129", 26002)
@ target.procmon_options = ( "proc_name" | "tvMobiliService.exe" )

target.procmon_options = \
(
"proc_name"        : "tvMobiliService.exe",
"stop_commands"    : ['net stop tvMobiliService'],
"start_commands"   : ['net start tvMobiliService'],
)

sess.add_target(target)
sess.connect(sess.root, s_get("HTTP"))
sess.fuzz()

文件“C:/sulley_build/sulley/kickfuzz.py”,第 8 行 @target.procmon_options = ("proc_name" | "tvMobiliService.exe") ^ SyntaxError: 无效语法

进程以退出代码 1 结束

【问题讨论】:

    标签: syntax fuzzer


    【解决方案1】:

    我的错误,正确的代码应该在下面。如果您按照链接中的相同示例,httpcallAX.py 应该放在 /sulley/requests 文件夹中。

    from sulley import *
    from requests import httpcallAX
    
    sess=sessions.session(session_filename="audits/http.session")
    target = sessions.target("192.168.175.129", 30888)
    target.netmon = pedrpc.client("192.168.175.129", 26001)
    target.procmon = pedrpc.client("192.168.175.129", 26002)
    # target.procmon_options = {"proc_name" : "tvMobiliService.exe"}
    
    target.procmon_options = \
        {
        "proc_name"        : "tvMobiliService.exe",
        "stop_commands"    : ['net stop tvMobiliService'],
        "start_commands"   : ['net start tvMobiliService'],
        }
    
    sess.add_target(target)
    sess.connect(sess.root, s_get("HTTP"))
    sess.fuzz()
    

    【讨论】:

      猜你喜欢
      • 2010-12-27
      • 1970-01-01
      • 1970-01-01
      • 2014-12-04
      • 2015-07-25
      • 1970-01-01
      • 2016-08-15
      • 1970-01-01
      • 1970-01-01
      相关资源
      最近更新 更多