11
 url = "http://www.example.com?type=a&type1=b&type2=c"
 urllist = get_urllist(url)
 trigger = ["'or '1'='1'"," 'OR '1'='2'","'OR a=a"]

def get_urllist(url): 
    url_parsed = urlparse.urlparse(url)
    #extract the query parameters of the URL 
    query =  urlparse.parse_qs(url_parsed.query)
    #get the list of query 
    query_list = query_list(query)
    #Get Base url 
    url = urlparse._replace(query=None).geturl()
    #modify url to get url_list 
    for query in query_list : 
       # change the original query to get the expected result 


 return url_list 


def query_list(query):
     for t in trigger:
         for key, value in query.items():
            query[key] += t
         query_list.append(query) 

     return query_list

クエリ パラメータの値を変更して URL のリストを返す方法は?

元の URL = " http://www.example.com?type=a&type1=b&type2=c "

期待される結果:

Url_list= [" http://www.example.com?type=a 'OR '1'='1'&type1=b'OR '1'='1'&type2=c'OR '1'='1' "," http://www.example.com?type=a 'OR '1'='2'&type1=b'OR '1'='2'&type2=c'OR '1'='2'" ," http://www.example.com?type=a 'OR a=a&type1=b'OR a=a&type2=c''OR a=a" ]

4

2 に答える 2