Shulou(Shulou.com)05/31 Report--

This article is about how brupsuite and sqlmap can be used together. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

Download and install brupsuite

Network disk link:

Https://pan.baidu.com/s/1vVsHMZTkNPAGnSTz3uFoMA extraction code: 449h

Refer to this link for registration method

Https://www.jianshu.com/p/f38f6abc2c11

Configuration of brupsuite

Install the FoxyProxy plug-in with Firefox as shown in the figure:

Set the local agent as shown in the figure:

Brupsuite Import Certificate

Enter http://burp/ in Firefox browser to download the certificate as shown in the figure:

Import certificate as shown in the figure

Brupsuite loads the sqlmap plug-in

It is too troublesome to use brupsuite to grab packages, export, and then use sqlmap to run files.

There is a tool for fast sqlmap scanning in burpsuite. CO2 is a burp plug-in. Burp sends intercepted requests directly to CO2, and then calls sqlmap to scan, saving a lot of time. CO2 is used as follows:

1. Select Extender-BAppStore, that is, select CO2 from the plug-in library of burp. There is an install button in the lower right corner, and click install.

2. After CO2 is installed, set the path of sqlmap and python, click CO2, select config, and then select the path of sqlmap and the path of python.

3. After CO2 is configured, when a request page is scanned by sqlmap, the request intercepted by burp is sent to SQLMapper. 4. Go to the CO2 plug-in bar, click Run, and you will call up the sqlmap command to scan.

Note: burp cannot be used properly during sqlmap scanning. Close the command line before it can be used normally.

Thank you for reading! This is the end of the article on "how to use brupsuite and sqlmap together". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.