当前位置:网站首页>Record an API interface SQL injection practice
Record an API interface SQL injection practice
2022-07-06 14:07:00 【Lazy and talented】
Catalog
0x01 Ideas :google hacking grammar asmx?wsdl
0x02 Found two interfaces And can call in different places
0x03 Grab the bag repeat Judge
To guide the A tutor
0x01 Ideas :google hacking grammar asmx?wsdl
Click on url:domain/WebServices/InboxWS.asmx
0x02 Found two interfaces And can call in different places
Firefox grabbing
test
0x03 Grab the bag repeat Judge
Four parameters plus ' newspaper nynax error It can be inferred that sql Inject
Last use sqlmap Run out sqlserver database Delay Injection
Because of the proximity here 12 The point interface service is unstable Get here first
0x04 Warehouse
sqlmap grammar
python sqlmap.py -r 1.txt --batch
python sqlmap.py -r 1.txt --dbs --batch
nudges
边栏推荐
- [MySQL table structure and integrity constraint modification (Alter)]
- Renforcer les dossiers de base de l'apprentissage
- xray與burp聯動 挖掘
- HackMyvm靶机系列(4)-vulny
- [VMware abnormal problems] problem analysis & Solutions
- Hackmyvm Target Series (3) - vues
- Nuxtjs quick start (nuxt2)
- 【数据库 三大范式】一看就懂
- MATLAB打开.m文件乱码解决办法
- Mixlab unbounded community white paper officially released
猜你喜欢
Network layer - simple ARP disconnection
canvas基础2 - arc - 画弧线
QT meta object qmetaobject indexofslot and other functions to obtain class methods attention
强化学习基础记录
"Gold, silver and four" job hopping needs to be cautious. Can an article solve the interview?
Record a penetration of the cat shed from outside to inside. Library operation extraction flag
[VMware abnormal problems] problem analysis & Solutions
xray與burp聯動 挖掘
Interpretation of iterator related "itertools" module usage
Ucos-iii learning records (11) - task management
随机推荐
Poker game program - man machine confrontation
QT meta object qmetaobject indexofslot and other functions to obtain class methods attention
7-1 output all primes between 2 and n (PTA programming)
实验四 数组
The United States has repeatedly revealed that the yield of interest rate hiked treasury bonds continued to rise
[dark horse morning post] Shanghai Municipal Bureau of supervision responded that Zhong Xue had a high fever and did not melt; Michael admitted that two batches of pure milk were unqualified; Wechat i
How to turn wechat applet into uniapp
中间件漏洞复现—apache
Intensive literature reading series (I): Courier routing and assignment for food delivery service using reinforcement learning
7-11 机工士姆斯塔迪奥(PTA程序设计)
Experiment five categories and objects
Hackmyvm target series (5) -warez
7-4 hash table search (PTA program design)
Matlab opens M file garbled solution
实验八 异常处理
Canvas foundation 1 - draw a straight line (easy to understand)
Principles, advantages and disadvantages of two persistence mechanisms RDB and AOF of redis
小程序web抓包-fiddler
7-9 制作门牌号3.0(PTA程序设计)
2. First knowledge of C language (2)