Shulou(Shulou.com)05/31 Report--

This article introduces you how to study the injection technology used by sqlmap, the content is very detailed, interested friends can refer to, hope to be helpful to you.

An injection target machine is built using django.

Def te (request): id = request.GET.get ("id") db = pymysql.connect ("127.0.0.1", "root", "123456", "T1", charset='utf8') cursor = db.cursor () cursor.execute ("SELECT * FROM test where id =" + id) data = cursor.fetchone () db.close () return HttpResponse (data [1])

Normal page

Add single quotation marks

There are several kinds of SQLMAP injection detection techniques.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.