1 20 50 150 500
欢迎来到存起来软件站,找素材,搜软件,就上存起来软件站!
当前位置 >Home >脚本 >脚本下载 >批处理 >搜索查找
提取日志危险访问记录特征加强版批处理(逆向分析漏洞根源)
跳转至下载链接

脚本介绍

效果图:







以下代码复制后存成a.bat文件后放到要分析的日志(.log后缀)目录下,双击,等,黑窗结束后查看结果,以后不用再为了分析庞大的日志文件头疼了,简单的一条命令而已,更多功能可以无限扩展哟。。

复制代码代码如下:
::日志提取特征加强版::
md Analy
findstr /c:"and" *.log >> Analy/and.txt
findstr /c:"or" *.log >> Analy/or.txt
findstr /c:"select" *.log >> Analy/select.txt
findstr /c:"exec" *.log >> Analy/exec.txt
findstr /c:"0x" *.log >> Analy/0x.txt
findstr /c:"md5" *.log >> Analy/md5.txt
findstr /c:"schema" *.log >> Analy/schema.txt
findstr /c:"eval" *.log >> Analy/eval.txt
findstr /c:"cmd" *.log >> Analy/cmd.txt
findstr /c:"char" *.log >> Analy/char.txt
findstr /c:"alter" *.log >> Analy/alter.txt
findstr /c:"begin" *.log >> Analy/begin.txt
findstr /c:"cast" *.log >> Analy/cast.txt
findstr /c:"chr" *.log >> Analy/chr.txt
findstr /c:"convert" *.log >> Analy/convert.txt
findstr /c:"count" *.log >> Analy/count.txt
findstr /c:"CONCAT" *.log >> Analy/CONCAT.txt
findstr /c:"create" *.log >> Analy/create.txt
findstr /c:"cursor" *.log >> Analy/cursor.txt
findstr /c:"declare" *.log >> Analy/declare.txt
findstr /c:"delete" *.log >> Analy/delete.txt
findstr /c:"dir" *.log >> Analy/dir.txt
findstr /c:"drop" *.log >> Analy/drop.txt
findstr /c:"end" *.log >> Analy/end.txt
findstr /c:"fetch" *.log >> Analy/fetch.txt
findstr /c:"format" *.log >> Analy/format.txt
findstr /c:"insert" *.log >> Analy/insert.txt
findstr /c:"limit" *.log >> Analy/limit.txt
findstr /c:"kill" *.log >> Analy/kill.txt
findstr /c:"master" *.log >> Analy/master.txt
findstr /c:"mid" *.log >> Analy/mid.txt
findstr /c:"open" *.log >> Analy/open.txt
findstr /c:"password" *.log >> Analy/password.txt
findstr /c:"request" *.log >> Analy/request.txt
findstr /c:"script" *.log >> Analy/script.txt
findstr /c:"shell" *.log >> Analy/shell.txt
findstr /c:"sp_" *.log >> Analy/sp_.txt
findstr /c:"where" *.log >> Analy/where.txt
findstr /c:"xp_" *.log >> Analy/xp_.txt
findstr /c:"sys" *.log >> Analy/sys.txt
findstr /c:"table" *.log >> Analy/table.txt
findstr /c:"truncate" *.log >> Analy/truncate.txt
findstr /c:"update" *.log >> Analy/update.txt
findstr /c:"union" *.log >> Analy/union.txt</p><p>::提取日志二次筛选::
cd Analy
findstr /c:"200 0 0" *.txt >> 200.log
findstr /c:"POST" 200.log >> 200POST.txt
findstr /c:"php" 200.log >> php.txt
findstr /c:"asa" 200.log >> asa.txt
findstr /c:"asp" 200.log >> asp.txt
findstr /c:"aspx" 200.log >> aspx.txt
findstr /c:"cer" 200.log >> cer.txt

警告:运行BAT源码是一种危险的动作,如果你不熟悉,请不要尝试!

下载地址

特别说明:

本站所有资源仅供学习与参考,请勿用于商业用途,否则产生的一切后果将由您自己承担!

本站为非营利性站点,所有资源均是网上搜集或私下交流学习之用,任何涉及

商业盈利目的均不得使用,否则产生的一切后果将由您自己承担!本站仅仅提供

一个观摩学习的环境,将不对任何资源负法律责任。所有资源请在下载后24小时内删除。若无意中侵犯到您的版权利益,敬请来信联系我们。我们会在收到信息三天内给予处理!

本站提供的普通下载点可能造成多线程类的软件无法下载,建议直接点击或另存为下载!

如有侵犯您的版权,请及时联系513175919#qq.com(#换@),我们将尽快处理。

Top