Shulou(Shulou.com)06/01 Report--

Sqlmap can import the log of webserver to find the injection point log in the format specified by sqlmap.

Sqlmap.py-l demo.log-- batch-- smart

Tips: some of Party A's dynamic scanner log analysis scanners can call sqlmap to detect the injection. After all, the artifact is updating itself to rewrite the test sqlmap. It may not be as perfect as sqlmap.

Make a demo sometime and record it.

Via: http://www.hack6.com/wzle/ctytq/20140314/42076.html can refer to

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.