TraverseFilesBySQLInjection
基于sqlmap的利用sql注入漏洞遍历文件是否存在的脚本
A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file
usage
需要注意，在盲注时如果开启多线程会导致不稳定
It should be noted that if multi-threading is enabled during blind injection, it will cause instability
usage: test2.py [-h] [-u URL | -r HEADERS_DATA] [-w FILE] [-t THREADS]
By zongdeiqianxing; Email: [email protected]
optional arguments:
-h, --help show this help message and exit
-u URL
-r HEADERS_DATA HTTP request header
-w FILE wordlist containing file path
-t THREADS threads count
show
$ python3 TraverseFilesBySQLInjection.py -r 1.txt -w linux.txt
2021-10-23 23:01:51,211 - __main__ - INFO - The program has been started, if found readable files, it will be displayed, please wait..
2021-10-23 23:02:21,234 - __main__ - INFO - /etc/hosts file exists
2021-10-23 23:02:41,058 - __main__ - INFO - /etc/hostname file exists
2021-10-23 23:03:00,863 - __main__ - INFO - /etc/passwd file exists
28 Dec 29, 2022
19 Nov 18, 2022
15 Dec 22, 2022
5 Nov 23, 2021
24 Dec 10, 2021
0 Mar 30, 2022
60 Dec 10, 2022
164 Dec 10, 2022
1 Dec 25, 2021
1 Dec 04, 2021
6 Jun 29, 2022
45 Dec 20, 2022
1 Nov 23, 2021
3 Dec 20, 2022
13 Oct 15, 2022
11 Sep 10, 2022
42 Aug 09, 2022
2 Dec 24, 2021
42 Dec 01, 2022
1.9k Dec 30, 2022