-
Photostudio-红队快速爬取网页快照工具
一、简介:
正如其名:这是一款能进行自动化检测,实时给网页拍照的工具
信息收集要求所收集到的信息要真实可靠。
当然,这个原则是信息收集工作的最基本的要求。为达到这样的要求,信息收集者就必须对收集到的信息反复核实,不断检验,力求把误差减少到最低限度。我们经常面临条件下不同的网络、资产、框架、进行信息收集 每次我们都面临不得不解决的新挑战,而收集资产状态是最繁琐的一种,工具和脚本来让我们的工作变得更加轻松,由于每个人都有每个人收集的方式和方法,但愿我们这款工具可以帮助您更轻快的完成工作。
Photostudio是一款能进行自动化检测网页存活并实时给网页拍照的工具,通过调用Fofa/Zoomeye/360qua/shodan等 Api快速准确查询资产并进行网页截图,从而实施进一步的信息筛查。
适应场景:内外网资产梳理快照
功能点
-
批量调用Fofa/Zoomeye/360qua/shodan等Api接口获取资产信息
-
自动化检测url存活,拍照截图
开发语言
- Python3
运行环境
- Linux
- Windows
- Mac
使用依赖库
- requests
- selenium==2.48.0
- colorama
- xlrd
安装
git clone https://github.com/s7ckTeam/Photostudio
cd Photostudio
pip3 install -r requirements.txt
二、使用方法:
Usage: python3 Photostudio.py --fofa title="admin" Usage: python3 Photostudio.py -f api.txt Usage: python3 Photostudio.py --fofa/-f title="admin"/api.txt -o imgs Usage: python3 Photostudio.py --fofa/-f title="admin"/api.txt -t png usage: Photostudio.py [-h] [-fofa QUERY] [-f FILE] [-o OUTPATH] [-t FILETYPE] optional arguments: -h, --help show this help message and exit -fofa QUERY, --fofa QUERY Input your api query. -f FILE, --file FILE Input your api.txt. -o OUTPATH, --outPath OUTPATH Input your outPath. -t FILETYPE, --fileType FILETYPE Input your fileType png/jpg...相关配置更改
-
API设置
在
config/config.py中fofaApi设置,输入对应的email与key即可
三、效果:
1、python3 Photostudio.py --fofa title="admin"
2、保存路径
四、特别感谢
冰海
狗一样的男人
s7ck Team
五、文末
红队武器库,我们在一线
问题/bug/建议在这里
https://github.com/s7ckTeam/Photostudio/issues
加微信进交流群
商务/投稿/加入团队:[email protected]
-
Photostudio是一款能进行自动化检测网页存活并实时给网页拍照的工具,通过调用Fofa/Zoomeye/360qua/shodan等 Api快速准确查询资产并进行网页截图,从而实施进一步的信息筛查。
Overview
Tools for test driven data-wrangling and data validation.
datatest: Test driven data-wrangling and data validation Datatest helps to speed up and formalize data-wrangling and data validation tasks. It impleme
Generates realistic traffic for load testing tile servers
Generates realistic traffic for load testing tile servers. Useful for: Measuring throughput, latency and concurrency of your tile serving stack. Ident
自动化爬取并自动测试所有swagger-ui.html显示的接口
swagger-hack 在测试中偶尔会碰到swagger泄露 常见的泄露如图: 有的泄露接口特别多,每一个都手动去试根本试不过来 于是用python写了个脚本自动爬取所有接口,配置好传参发包访问 原理是首先抓取http://url/swagger-resources 获取到有哪些标准及对应的文档地
Automating the process of sorting files in my downloads folder by file type.
downloads-folder-automation Automating the process of sorting files in a user's downloads folder on Windows by file type. This script iterates through
pytest plugin for distributed testing and loop-on-failures testing modes.
xdist: pytest distributed testing plugin The pytest-xdist plugin extends pytest with some unique test execution modes: test run parallelization: if yo
FauxFactory generates random data for your automated tests easily!
FauxFactory FauxFactory generates random data for your automated tests easily! There are times when you're writing tests for your application when you
Main purpose of this project is to provide the service to automate the API testing process
PPTester project Main purpose of this project is to provide the service to automate the API testing process. In order to deploy this service use you s
A simple serverless create api test repository. Please Ignore.
serverless-create-api-test A simple serverless create api test repository. Please Ignore. Things to remember: Setup workflow Change Name in workflow e
automate the procedure of 403 response code bypass
403bypasser automate the procedure of 403 response code bypass Description i notice a lot of #bugbountytips describe how to bypass 403 response code s
Fidelipy - Semi-automated trading on fidelity.com
fidelipy fidelipy is a simple Python 3.7+ library for semi-automated trading on fidelity.com. The scope is limited to the Trade Stocks/ETFs simplified
Mockoon is the easiest and quickest way to run mock APIs locally. No remote deployment, no account required, open source.
Mockoon Mockoon is the easiest and quickest way to run mock APIs locally. No remote deployment, no account required, open source. It has been built wi
WIP SAT benchmarking tooling, written with only my personal use in mind.
SAT Benchmarking Some early work in progress tooling for running benchmarks and keeping track of the results when working on SAT solvers and related t
Penetration testing
Penetration testing
pytest splinter and selenium integration for anyone interested in browser interaction in tests
Splinter plugin for the pytest runner Install pytest-splinter pip install pytest-splinter Features The plugin provides a set of fixtures to use splin
✅ Python web automation and testing. 🚀 Fast, easy, reliable. 💠
Build fast, reliable, end-to-end tests. SeleniumBase is a Python framework for web automation, end-to-end testing, and more. Tests are run with "pytes
HTTP traffic mocking and testing made easy in Python
pook Versatile, expressive and hackable utility library for HTTP traffic mocking and expectations made easy in Python. Heavily inspired by gock. To ge
Fully functioning price detector built with selenium and python
Fully functioning price detector built with selenium and python
A collection of testing examples using pytest and many other libreris
Effective testing with Python This project was created for PyConEs 2021 Check out the test samples at tests Check out the slides at slides (markdown o
Silky smooth profiling for Django
Silk Silk is a live profiling and inspection tool for the Django framework. Silk intercepts and stores HTTP requests and database queries before prese
A pure Python script to easily get a reverse shell
easy-shell A pure Python script to easily get a reverse shell. How it works? After sending a request, it generates a payload with different commands a


