Python编程SqlmapAPI批量扫描sql注入

最新推荐文章于 2024-05-30 15:46:42 发布

kriesa

最新推荐文章于 2024-05-30 15:46:42 发布

阅读量669

点赞数

分类专栏： python 文章标签：网络安全 python

本文链接：https://blog.csdn.net/kriesa/article/details/125759759

版权

import requests
import json
import time

#1.创建新任务记录任务ID @get("/task/new")
#2.设置任务ID扫描信息@get("/option//set")
#3.开始扫描对应ID任务 @get("/scan//start")
#4.读取扫描状态判断结果 @get("/scan//status")
#5.如果结束删除ID@get("/task//delete")
#6.扫描结果查看@get("/scan//data")
#sqlmapapi.py -s
def sqlmapapi(url):
    data = {
        "url": url
    }
    headers = {
        "Content-Type": "application/json"
    }
    tasl_url = 'http://127.0.0.1:8775/task/new'
    req = requests.get(tasl_url)
    tasl_uid = req.json()['taskid']
   # print(tasl_uid)
    if 'success' in req.content.decode('utf-8'):
        print('获取到ID : '+tasl_uid+'sqlmapapi 成功运行将要执行扫描信息')
        set_url = "http://127.0.0.1:8775/option/" + tasl_uid + "/set"
        set_req = requests.post(set_url, data=json.dumps(data), headers=headers)