Python網路安全程式設計技巧

from http.server import HTTPServer, BaseHTTPRequestHandler
import ssl

class SecureHTTPRequestHandler(BaseHTTPRequestHandler):
    def do_GET(self):
        self.send_response(200)
        self.end_headers()
        self.wfile.write(b'您好，世界！')

if __name__ == '__main__':
    https_server = HTTPServer(('localhost', 4443), SecureHTTPRequestHandler)

    # 建立 SSL Context
    context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)

    # 載入憑證
    context.load_cert_chain(certfile="cert.pem", keyfile="key.pem")

    # 將 Socket 包裝成 SSL Socket
    https_server.socket = context.wrap_socket(https_server.socket, server_side=True)

    # 啟動伺服器
    https_server.serve_forever()

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

import urllib.request
import urllib.parse

# 使用 urlopen 函式傳送 GET 請求
response = urllib.request.urlopen('https://www.example.com')

# 讀取回應內容
html = response.read().decode('utf-8')
print(html)

# 使用 urlencode 函式編碼 POST 資料
data_dictionary = {'key1': 'value1', 'key2': 'value2'}
data = urllib.parse.urlencode(data_dictionary)
data = data.encode('ascii')

# 使用 urlopen 函式傳送 POST 請求
response = urllib.request.urlopen('https://www.example.com/post', data)

# 讀取回應內容
response_data = response.read().decode('utf-8')
print(response_data)

import urllib.request
import json

url = "https://api.example.com/data"
with urllib.request.urlopen(url) as response:
    json_data = json.loads(response.read().decode("utf-8"))
    print(json_data)

import urllib.request
from urllib.request import Request

url = "https://www.example.com"
user_agent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3'

# 方法一：使用 build_opener
opener = urllib.request.build_opener()
opener.addheaders = [('User-agent', user_agent)]
urllib.request.install_opener(opener)
response = urllib.request.urlopen(url)

# 方法二：使用 Request 物件
request = Request(url)
request.add_header('User-agent', user_agent)
response = urllib.request.urlopen(request)

# 讀取回應標頭
for header, value in response.getheaders():
    print(f"{header}: {value}")

import urllib.request
import re

def fetch_email_from_url(url):
    try:
        with urllib.request.urlopen(url) as response:
            html_content = response.read().decode('utf-8')
            email_pattern = r'\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b'
            emails_found = re.findall(email_pattern, html_content)
            return emails_found
    except Exception as e:
        print(f"錯誤發生: {e}")
        return []

# 使用範例
url_to_scrape = "https://example.com"
emails = fetch_email_from_url(url_to_scrape)
if emails:
    print("找到的Email地址:")
    for email in emails:
        print(email)
else:
    print("沒有找到任何Email地址。")

import urllib.request
import re

USER_AGENT = 'Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.101 Mobile Safari/537.36'
url = input("請輸入網址：")

opener = urllib.request.build_opener()
opener.addheaders = [('User-agent', USER_AGENT)]
urllib.request.install_opener(opener)

try:
    response = urllib.request.urlopen(url)
    html_content = response.read().decode('utf-8')
    
    pattern = re.compile(r"[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}")
    emails = re.findall(pattern, html_content)

    if emails:
        print("找到的Email地址：")
        for email in emails:
            print(email)
    else:
        print("未找到Email地址。")

except urllib.error.URLError as e:
    print(f"網址錯誤：{e.reason}")
except Exception as e:
    print(f"發生錯誤：{e}")

import urllib.request

url = "https://www.python.org/static/img/python-logo.png"
urllib.request.urlretrieve(url, "python_logo.png")
print("檔案下載完成！")

import urllib.request

url = "https://www.python.org/static/img/python-logo.png"

with urllib.request.urlopen(url) as response:
    with open("python_logo.png", "wb") as file:
        file.write(response.read())

print("檔案下載完成！")

import urllib.request

url = "http://ftp.debian.org/debian/dists/stable/contrib/Contents-all.gz"

with urllib.request.urlopen(url) as response:
    with open("Contents-all.gz", "wb") as file:
        chunk_size = 8192
        while True:
            chunk = response.read(chunk_size)
            if not chunk:
                break
            file.write(chunk)

print("檔案下載完成！")

import requests

url = "https://www.python.org"
response = requests.get(url)

print(f"狀態碼：{response.status_code}")
print(f"網頁內容：{response.text}")

for key, value in response.headers.items():
    print(f"{key}: {value}")

import requests

def get_headers(domain):
    response = requests.get(f"http://{domain}")
    if response.status_code == 200:
        return response.headers
    else:
        return None

if __name__ == "__main__":
    domain = input("輸入網址：http://")
    headers = get_headers(domain)
    if headers:
        for key, value in headers.items():
            print(f"{key} --> {value}")
    else:
        print("無法取得標頭資訊")

import requests

def get_robots_txt(url):
    response = requests.get(f"{url}/robots.txt")
    if response.status_code == 200:
        return response.text
    else:
        return None

if __name__ == "__main__":
    url = input("輸入網址：")
    robots_txt = get_robots_txt(url)
    if robots_txt:
        print(robots_txt)
    else:
        print("無法取得 robots.txt 檔案")

import requests
import shutil

def download_image(url, filename):
    response = requests.get(url, stream=True)
    with open(filename, 'wb') as out_file:
        shutil.copyfileobj(response.raw, out_file)

if __name__ == "__main__":
    image_url = input("輸入圖片網址：")
    filename = input("輸入儲存檔名：")
    download_image(image_url, filename)
    print(f"圖片已儲存至 {filename}")

import requests
import json

url = 'https://httpbin.org/post'
payload = {
    "key1": "value1",
    "key2": "value2"
}
headers = {
    'Content-Type': 'application/json',
    'Accept': 'application/json'
}

response = requests.post(url, json=payload, headers=headers)

if response.status_code == 200:
    print('回應 JSON:')
    print(json.dumps(response.json(), indent=4))

import requests

with requests.Session() as session:
    session.headers.update({
        'Accept': 'application/json'
    })
    
    response = session.get('https://httpbin.org/cookies/set/sessioncookie/1234567890')
    print('Cookies 設定回應:')
    print(response.text)
    
    response = session.get('https://httpbin.org/cookies')
    print('\n目前 Cookies:')
    print(response.text)

import requests

# 停用重定向
response = requests.get('http://github.com', allow_redirects=False)
print(f'狀態碼（停用重定向）：{response.status_code}')

# 設定逾時
try:
    response = requests.get('https://httpbin.org/delay/3', timeout=1)
except requests.Timeout:
    print('請求逾時')

import requests

# 組態代理
proxies = {
    'http': 'http://10.10.1.10:3128',
    'https': 'http://10.10.1.10:1080'
}

# 停用 SSL 驗證（不建議在生產環境中使用）
response = requests.get('https://httpbin.org/get', proxies=proxies, verify=False)
print(f'SSL 驗證停用狀態碼：{response.status_code}')

pip install PyJWT

import jwt
import datetime

# 定義秘密金鑰
secret_key = "your_secret_key"

# 定義 payload
payload = {
    "user_id": 123,
    "exp": datetime.datetime.utcnow() + datetime.timedelta(minutes=30)  # 設定過期時間
}

# 生成 JWT
token = jwt.encode(payload, secret_key, algorithm="HS256")

print("Generated JWT:", token)

try:
    # 驗證 JWT
    decoded_payload = jwt.decode(token, secret_key, algorithms=["HS256"])
    print("Decoded Payload:", decoded_payload)
except jwt.ExpiredSignatureError:
    print("Token has expired")
except jwt.InvalidTokenError:
    print("Invalid token")

pip install pcapy-ng

import pcapy

# 開啟網路介面進行封包擷取
cap = pcapy.open_live("any", 65536, 1, 0)

# 定義封包處理函式
def packet_handler(header, data):
    print("擷取到封包：", data)

# 開始擷取封包
while True:
    (header, data) = cap.next()
    packet_handler(header, data)

import pcapy
import dpkt

# 開啟網路介面進行封包擷取
cap = pcapy.open_live("any", 65536, 1, 0)

def packet_handler(header, data):
    # 使用 dpkt 解析封包
    eth = dpkt.ethernet.Ethernet(data)
    if eth.type == dpkt.ethernet.ETH_TYPE_IP:
        ip = eth.data
        print("IP 封包：", ip.src, "->", ip.dst)

# 開始擷取封包
while True:
    (header, data) = cap.next()
    packet_handler(header, data)