aiastia
commented
3 years ago 此脚本全复制自cloudfront_nodecat，这里仅做为备份和参考。
https://github.com/fork-bak/cloudfront_nodecat
# coding=utf-8
import threading
import requests
import queue
import sys
import re
import os
import numpy as np
#
def bThread(iplist):
threadl = []
global q
q = queue.Queue()
for host in iplist:
q.put(host)
for x in range(0, int(SETTHREAD)):
threadl.append(tThread(q))
for t in threadl:
t.start()
for t in threadl:
t.join()
#create thread
class tThread(threading.Thread):
def __init__(self, queue):
threading.Thread.__init__(self)
self.queue = q
def run(self):
while not self.queue.empty():
host = self.queue.get()
try:
checkServer(host)
except:
continue
def checkalive():
print('\n[Step1] Scanning alive servers:\n')
zmap = os.popen('zmap -w ' + SETIPLIST + ' -p 443 -B 30M')
global IPLIST
IPLIST = zmap.read().splitlines()
def checkServer(host):
header ={'user-agent': 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36'}
aimurl = "http://"+host+":443"
response = requests.get(url=aimurl,headers=header,timeout=10)
serverText = response.headers['server']
if (serverText == "CloudFront"):
print("NewNode:" + host +" has been catched!\n")
if MUTEX.acquire(3):
with open("result.txt","a+") as file:
file.write(host+"\n")
file.close()
MUTEX.release()
if __name__ == '__main__':
os.system("clear")
print('\n############# Cloud Front Scan ################')
print('# Author Madlifer|blog:https://vicho.me #')
print('###############################################\n')
global SETIPLIST
global SETTHREAD
global MUTEX
MUTEX = threading.Lock()
SETIPLIST = sys.argv[1]
SETTHREAD = sys.argv[2]
checkalive()
print('\n[Step2] Start Scanning edge nodes:\n')
bThread(IPLIST)
print('\n[WOW] Winner Winner Chicken Dinner！\n')
原理 CF的节点打开，在响应的header里Server字段值为CloudFront，利用这方法我们可以用脚本自动检测CF的IP。
脚本的大致思路是找到CF的所有IP段，然后用zmap工具检测这些IP的443端口通不通，保留通的IP再进行header里Server字段值的判断，值为CloudFront即为CF。
扫描脚本 脚本运行条件：python3环境、numpy和requests模块、另加zmap工具。python3环境可以改为python环境，只需要把脚本的queue模块名改成Queue，第十四行也改成Queue。zmap工具也可以是masscan或者nmap，这两种工具下面有介绍。
Ubuntu/Debian系统
CentOS系统