Shulou(Shulou.com)05/31 Report--

The content of this article mainly focuses on how the onion mode agent of SQLMAP is narrated. The content of the article is clear and well-organized. It is very suitable for beginners to learn and is worth reading. Interested friends can follow the editor to read together. I hope you can get something through this article!

Due to the penetration testing of foreign websites, but most websites have access frequency control, once exceeding this frequency, IP will be banned directly. Especially when SQLMAP ran, she was a "aunt red" and quit by mistake before she finished running SQLMAP.

So we began to study the agent mode of SQLMAP. SQLMAP has two agent modes, one is ordinary agent (HTTP agent), the other is onion agent.

I originally wanted to write about the application of ordinary agents, but Baidu saw that this article was detailed enough and stopped talking nonsense. Sqlmap extension-external IP proxy pool implementation

Or focus on onion agents, at first directly use onions to do injection, did not report "aunt red", and then with the increase in the number of infiltrated websites, it is found that tor still has the problem of reporting errors. So I wonder if there is no IP automatic switching between the modules of tor in SQLMAP.

So I wrote a code test to simulate the situation in which IP is directly disabled when the intrusion detection system detects injection. I use a delay of 1000 seconds and sqlmap will report an error.

Use sqlmap-- tor--tor-type= "SOCKS5" to inject, unfortunately, tor's IP has not changed.

Later, I thought that tor had the mechanism of constantly switching IP, and guessed that there was no problem with sqlmap, and the problem should lie in the configuration of tor, so I modified the configuration file torrc of tor, location C:\ Users\ Administrator\ AppData\ Roaming\ tor.

Just add a sentence and switch IP once a minute.

MaxCircuitDirtiness 1

After running with sqlmap, I found that IP was constantly switching.

But the configuration file can only take 1 minute, and I think I need to switch IP in a short time, so I found an open source software tor-ip-changer, download address.

Thank you for your reading. I believe you have some understanding of "what the onion mode agent of SQLMAP is like". Go ahead and practice it. If you want to know more about it, you can follow the website! The editor will continue to bring you better articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.