【白帽子】Web安全-Python脚本编写-5

python-http请求

GET请求：

    1.不带参数：requests.get(url)

    2.带参数：requests.get(url=url,params={key1=value1,key2=value2}）

        r.url获取请求URL

import requests

url="http://127.0.0.1/brute/brute.get.php"

payload={'username':'admin','password':'admin','submit':'登录'}

r=requests.get(url,params=payload)
print(r.statu_code)
print(r.url)
print(r.content)
print(r.text)

result=r.content

if str(result).find('succ'):
    print("admin:admin "+'successful')
#实际情况下，可能是读取字典文件来获取用户名和密码

POST请求：

    1.不带参数：requests.post(url)

    2.带参数：requests.post(url,data={key1:value1})

import requests

url="http://127.0.0.1/brute/brute_post.php"
data={'username':'admin','password':'admin','submit':'登录'}
r=requests.post(url,data=data)

print(r.status_code)
print(type(r.text))#class <str>

if r.text.find('succ'):
    print('admin:admin '+'successful')

自定义请求头：

import requests

url="http://127.0.0.1/brute/brute/brute_get.php"

headers={"User-Agent":"HAHA"}

r1=requests.get(url)
print(r1.request.headers)

r=requests.get(url,headers=headers)
print(r.request.headers)
#get和post都可以自定义headers