摘要: 我们任何时候都不应该自己拼接SQL语句! sqlInjectDemo("xxx' or 1=1#") sqlInjectDemo("xxx' union select * from user #") sqlInjectDemo("xxx' and (select count(*) from user 阅读全文
posted @ 2020-02-10 21:40 1769987233 阅读(299) 评论(0) 推荐(0)
摘要: import requests from lxml import etree from urllib import parse import re import json import threading from queue import Queue import hashlib class Sp 阅读全文
posted @ 2020-02-10 15:55 1769987233 阅读(257) 评论(0) 推荐(0)