Paul C's Blog

#通过模拟键盘的方式获取报告
#参考https://blog.csdn.net/yan_star/article/details/113667094

import os
import pyautogui as pag
import pyperclip
import win32clipboard as w
import win32con#下载pywin32包
import time


address_bar=(1322,107)  #地址栏坐标
test_result=(142,365)   #预测结果所在坐标


api_addr="https://www.virustotal.com/gui/file/"

samples_addr="E:\Linux_sh\malware\Linux-Malware-Samples"#样本需要提前计算sha256值
report_addr="E:/Linux_sh/report_"+samples_addr+".txt"
test_str="00ae07c9fe63b080181b8a6d59c6b3b6f9913938858829e5a42ab90fb72edf7a"
url=api_addr+test_str
flag=1#flag==1为恶意


def get_text():
  w.OpenClipboard()
  d = w.GetClipboardData(win32con.CF_TEXT)
  w.CloseClipboard()
  return d.decode('utf-8')

def examine(file):
  #输入网址
  url=api_addr+file
  pag.click(address_bar[0],address_bar[1],1)
  pag.hotkey('alt','d')
  pyperclip.copy(url)
  #pyperclip.paste()
  pag.hotkey('ctrl','v')
  pag.keyDown('enter')
  pag.keyUp('enter')
  time.sleep(2)
  #获取检测结果(142,365)
  pag.click(test_result[0],test_result[1],2)
  pag.hotkey('ctrl','c')
  result=get_text()
  if result=='0':
      flag=0
  else:
      flag=1
  print('%s:%d\n'%(test_str,flag))



if __name__ == "__main__":
  path=samples_addr
  samples=os.listdir(samples_addr)
  for file in samples:
    examine(file)

-- coding: cp936 --

coging:UTF-8

二进制转16进制

ch=['0','1','2','3','4','5','6','7','8',
    '9','A','B','C','D','E','F']
x=int(input("请输入一个二进制数="))
y=0
k=0
while True:
    k+=1
    i=x % 10
    if i1:
        y=y+2**(k-1)
    x=x//10
    if x0:
        break
z=''
while True:
    k=y % 16
    z=ch[k]+z
    y=y // 16
    if y==0:
        break
print(z)       

#!/usr/bin/env python
#读取二进制文件，转为16进制输出
#encoding: utf-8  
import binascii   
#fh = open(r'E:\test.png', 'rb')  
#a = fh.read() 
#print 'raw: ',`a`,type(a)
a='011001100110110001100001011001110111101101100011011001010011001101100101001101010011000000110010011000110010110100110100001110000110001100111001001011010011010001100100001101010011000000101101001110010011100100111001001100000010110100110101011000100011100000110001011001000110001000110110011001100110001101100010011001100011000001111101'
hexstr = binascii.b2a_hex(a)
print a
print hexstr #示意结果为4d5a900003000000....

from bubblepy import BubbleBabble

str='xinik-samak-luvag-hutaf-fysil-notok-mepek-vanyh-zipef-hilok-detok-damif-cusol-fezyx'
bb=BubbleBabble()
print(bb.decode(str))

from zlib import crc32
import random

char='0123456789'

def crc32_f(data):
    return hex(crc32(data)&0xffffffff)[2:10]

length=input('length:')
crc32_=raw_input('crc32:').lower()

while True:
    text=''
    for i in range(length):
        text+=char[random.randint(0,len(char)-1)]
    if crc32_f(text)==crc32_:
        raw_input('find it:'+text)
        exit

import base64
f=open('input.txt','r')
out=open('base64_decode.txt','w')
f1=f.read()
def b64dec(astr,m):
 f2=astr
 for i in range(m):
  f2=base64.b64decode(f2)
  print f2
 astr=f2
 out.write(astr)


b64dec(f1,2)
f.close()
out.close()

#-*-coding:utf-8-*-


'''
fileName : VigenereDecrypto.py
'''

def VigenereDecrypto (output , key) :
    ptLen = len (output)
    keyLen = len (key)
quotien = ptLen // keyLen
remainder = ptLen % keyLen

inp = ""

for i in range (0 , quotient) :
    for j in range (0 , keyLen) :
        c = int((ord(output[i*keyLen+j]) - ord('a') + 26 - (ord(key[j]) - ord('a')) % 26 + ord('a')))
        #global input
        inp += chr (c)

for i in range (0 , remainder) :
    c = int((ord(output[quotient*keyLen + i]) - ord('a') + 26 - (ord(key[i]) - ord('a')) % 26 + ord('a')))
    #global input
    inp += chr (c)

return inp