实战 | 教育src漏洞挖掘获取rank以及证书获取

import requests, reurl = 'https://src.sjtu.edu.cn/list/?page='m_num = 0c_num = 0s_num = 0ss_num = 0x_num = 0code_rce_num = 0load_num = 0read_num = 0p_num = 0rce_num = 0passwd_num = 0file_num = 0ll_num = 0check_num = 0hei_num = 0luoji_num = 0
read_num = 0p_num = 0rce_num = 0passwd_num = 0file_num = 0ll_num = 0check_num = 0hei_num = 0luoji_num = 0
for i in range(1, 642):    r = requests.get(url + str(i))    rr = r.text    m = rr.count("敏感信息泄露")    c = rr.count("CSRF漏洞")    s = rr.count("SQL注入漏洞")    ss = rr.count("SSRF漏洞")    x = rr.count('XSS漏洞')    code_rce = rr.count('代码执行漏洞')    loads = rr.count('任意文件下载')    reads = rr.count('任意文件读取')    p = rr.count('其他漏洞')    rce = rr.count('命令执行漏洞')    passwd = rr.count('弱口令')    file = rr.count('文件上传漏洞')    ll = rr.count('未授权访问')    check = rr.count('点击劫持漏洞')    hei = rr.count('疑似被黑/存在后门')    luoji = rr.count('逻辑缺陷')    m_num = int(m) + m_num    c_num = int(c) + c_num    s_num = int(s) + s_num    ss_num = int(ss) + ss_num    x_num = int(x) + x_num    code_rce_num = int(code_rce) + code_rce_num    load_num = int(loads)+load_num    read_num = int(reads)+read_num    p_num = p+p_num    rce_num = rce+rce_num    passwd_num = passwd+passwd_num    file_num = file+file_num    ll_num = ll+ll_num    check_num = check+check_num    hei_num = hei+hei_num    luoji_num = ll+ll_num
print('敏感信息泄露:', m_num)print('CSRF漏洞:', c_num)print('SQL注入漏洞:', s_num)print('SSRF漏洞:', ss_num)print('XSS漏洞:', x_num)print('代码执行漏洞:', code_rce_num)print('任意文件下载',load_num)print('任意文件读取',read_num)print('其他漏洞',p_num)print('命令执行漏洞',rce_num)print('弱口令',passwd_num)print('文件上传漏洞',file_num)print('未授权访问',ll_num)print('点击劫持漏洞',check_num)print('疑似被黑/存在后门',hei_num)print('逻辑缺陷',ll_num)

<form action="xxx/xxx/login.php" name="login" method="post" onsubmit="return check()">