如何使用Python枚举指定URL中的所有参数？

Alright, let's figure out how to enumerate all those unknown query parameters for your target URL using Python. I'll walk you through a practical, easy-to-implement solution that covers both generating the URLs and optionally validating them.

First, define the base URL (without any query parameters) and the list of parameters you want to enumerate. This keeps your code clean and easy to modify later.

from urllib.parse import urlencode, urljoin

# Your target base URL
base_url = "http://www.examplesite.com/index.php"
# List of unknown parameters you need to test
params_to_enumerate = ["action", "fetch", "enter", "details_of"]
# Placeholder value for each parameter (adjust this if you need specific values)
placeholder_value = "<some_value>"

We'll loop through each parameter, build a query string for it, and combine it with the base URL. Using urlencode and urljoin ensures your URLs are properly formatted (no weird character issues or malformed paths).

enumerated_urls = []
for param in params_to_enumerate:
    # Create a dictionary for the query parameter
    query_dict = {param: placeholder_value}
    # Encode the query string and join it to the base URL
    full_url = urljoin(base_url, f"?{urlencode(query_dict)}")
    enumerated_urls.append(full_url)

# Print out the results to verify
print("Enumerated URLs:")
for url in enumerated_urls:
    print(url)

Running this will output exactly the URLs you listed in your example—perfect for your use case.

If you want to check if these URLs actually return valid responses (instead of just generating them), you can use the requests library to send GET requests. This helps you filter out dead or invalid endpoints.

First, install the library if you haven't already:

pip install requests

Then add this code snippet:

import requests

# Optional: Add headers to mimic a browser (avoids being blocked by basic anti-scraping)
headers = {
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
}

print("\nValidating URLs:")
for url in enumerated_urls:
    try:
        response = requests.get(url, headers=headers, timeout=5)
        print(f"✅ {url} | Status Code: {response.status_code}")
        # You can add extra checks here, like looking for specific text in the response
        # if "success" in response.text:
        #     print("    Contains 'success' keyword!")
    except requests.exceptions.RequestException as e:
        print(f"❌ {url} | Error: {str(e)}")

• Dynamic Parameter Lists: If your parameters are stored in a text file (like a wordlist), you can load them instead of hardcoding:

  with open("param_wordlist.txt", "r") as f:
      params_to_enumerate = [line.strip() for line in f if line.strip()]
  

• Special Characters: urlencode automatically handles characters like spaces or symbols, so you don't have to manually escape them.
• Rate Limiting: If you're testing a large number of parameters, add a small delay between requests with time.sleep(1) to avoid getting blocked.

内容的提问来源于stack exchange，提问作者0xInfection