如何在Sulley fuzzer上修复模糊网络层的语法

Question

我跟着https://www.slideshare.net/htbridge/fuzzing-an-introduction-to-sulley-framework上的代码走。

以下是kickfuzz.py的代码。我遇到了kickfuzz.py的无效语法

from sulley import *
from requests import httpcallAX

sess=sessions.session(session_filename="audits/http.session")
target = sessions.target("192.168.175.129", 30888)
target.netmon = pedrpc.client("192.168.175.129", 26001)
target.procmon = pedrpc.client("192.168.175.129", 26002)
@ target.procmon_options = ( "proc_name" | "tvMobiliService.exe" )

target.procmon_options = \
(
"proc_name"        : "tvMobiliService.exe",
"stop_commands"    : ['net stop tvMobiliService'],
"start_commands"   : ['net start tvMobiliService'],
)

sess.add_target(target)
sess.connect(sess.root, s_get("HTTP"))
sess.fuzz()

文件"C:/sulley_build/sulley/kickfuzz.py"，第8行@ target.procmon_options = ("proc_name“| "tvMobiliService.exe") ^ SyntaxError:无效语法

进程已完成，退出代码为%1

Answer 1

我的错误，正确的代码应该在下面。如果您正在遵循链接中的相同示例，则httpcallAX.py应该放在/sulley/requests文件夹中。

from sulley import *
from requests import httpcallAX

sess=sessions.session(session_filename="audits/http.session")
target = sessions.target("192.168.175.129", 30888)
target.netmon = pedrpc.client("192.168.175.129", 26001)
target.procmon = pedrpc.client("192.168.175.129", 26002)
# target.procmon_options = {"proc_name" : "tvMobiliService.exe"}

target.procmon_options = \
    {
    "proc_name"        : "tvMobiliService.exe",
    "stop_commands"    : ['net stop tvMobiliService'],
    "start_commands"   : ['net start tvMobiliService'],
    }

sess.add_target(target)
sess.connect(sess.root, s_get("HTTP"))
sess.fuzz()