Shulou(Shulou.com)06/01 Report--

This article shows you how to customize the detection parameters of the injection tool sqlmap, which is concise and easy to understand, which will definitely brighten your eyes. I hope you can get something through the detailed introduction of this article.

First, set the detection level. Cookie will be tested when level is 2, and User-Agent/Referer header will be tested when level is 3. Default is 1.

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- level 5-- dbs

Second, set the test risk parameters. By default, 1 will test most test statements, 2 will add event-based test statements, 3 will increase the SQL injection test of OR statements, and the default is 1

-- risk 2

Third, set page comparison parameters to judge whether it is true or false by judging the difference of the returned page.

-- string specifies the containing string

-- not-string specifies that no string is included

-- regexp matches strings through regular matching

-- code matching status-- code=200

4. Set content comparison parameters

-- text-only settings page content contains text

Text-only= "Welcome"

-- titles settings page title contains text

-- titles= "backstage"

The above is how to customize the detection parameters of the injection tool sqlmap. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.