免费开源的SQL注入工具SQLmap.zip

上传者: 39841365 | 上传时间: 2023-10-27 10:34:34 | 文件大小: 7.37MB | 文件类型: ZIP
SQLmap是一款用来检测与利用SQL注入漏洞的免费开源工具,有一个非常棒的特性,即对检测与利用的自动化处理(数据库指纹、访问底层文件系统、执行命令)。   读者可以通过位于SourceForge的官方网站下载SQLmap源码:http://sourceforge.net/projects/sqlmap/   什么是SQL注入?         SQL注入是一种代码注入技术,过去常常用于攻击数据驱动性的应用,比如将恶意的SQL代码注入到特定字段用于实施拖库攻击等。SQL注入的成功必须借助应用程序的安全漏洞,例如用户输入没有经过正确地过滤(针对某些特定字符串)或者没有特别强调类型的时候,都容易造成异常地执行SQL语句。SQL注入是网站渗透中最常用的攻击技术,但是其实SQL注入可以用来攻击所有的SQL数据库。在这个指南中我会向你展示在Kali Linux上如何借助SQLMAP来渗透一个网站(更准确的说应该是数据库),以及提取出用户名和密码信息。   什么是SQLMAP?          SQLMAP是一个开源的渗透测试工具,它主要用于自动化地侦测和实施SQL注入攻击以及渗透数据库服务器。SQLMAP配有强大的侦测引擎,适用于高级渗透测试用户,不仅可以获得不同数据库的指纹信息,还可以从数据库中提取数据,此外还能够处理潜在的文件系统以及通过带外数据连接执行系统命令等。         访问SQLMAP的官方网站http://www.sqlmap.org可以获得SQLMAP更为详细的介绍,如它的多项特性,最为突出的是SQLMAP完美支持MySQL、Oracle、PostgreSQL、MS-SQL与Access等各种数据库的SQL侦测和注入,同时可以进行六种注入攻击。        还有很重要的一点必须说明:在你实施攻击之前想想那些网站的建立者或者维护者,他们为网站耗费了大量的时间和努力,并且很有可能以此维生。你的行为可能会以你永远都不希望的方式影响到别人。我想我已经说的够清楚了。(PS:请慎重攻击,不要做违法的事情)       PS:之前在wooyun上看了一些关于SQLMAP的文章,受益匪浅,今天翻译这篇文章,是希望对于如何使用SQLMAP提供一个基本的框架,SQL注入的原理以及SQLMAP详细的命令参数和不同的应用实例可以参考下面的文章: SQL注射原理:http://drops.wooyun.org/papers/59 SQLMAP用户手册:http://drops.wooyun.org/tips/143 SQLMAP实例COOKBOOK:http://drops.wooyun.org/tips/1343 SQLmap的作者是谁? Bernardo DameleAssumpcao Guimaraes (@inquisb),读者可以通过[email protected]与他取得联系,以及Miroslav Stampar (@stamparm)读者可以通过[email protected]与他联系。 [email protected]者联系。 相关教程请参考: http://www.cnblogs.com/waw/p/5140555.html http://www.freebuf.com/articles/web/29942.html 测试注入的效果图:      


标签:sql注入

文件下载

资源详情

[{"title":"( 515 个子文件 7.37MB ) 免费开源的SQL注入工具SQLmap.zip","children":[{"title":"stager.asp_ <span style='color:#111;'> 1.17KB </span>","children":null,"spread":false},{"title":"backdoor.asp_ <span style='color:#111;'> 243B </span>","children":null,"spread":false},{"title":"stager.aspx_ <span style='color:#111;'> 529B </span>","children":null,"spread":false},{"title":"backdoor.aspx_ <span style='color:#111;'> 417B </span>","children":null,"spread":false},{"title":"AUTHORS <span style='color:#111;'> 190B </span>","children":null,"spread":false},{"title":"icmpsh-s.c <span style='color:#111;'> 9.12KB </span>","children":null,"spread":false},{"title":"icmpsh-m.c <span style='color:#111;'> 3.87KB </span>","children":null,"spread":false},{"title":"COMMITMENT <span style='color:#111;'> 2.04KB </span>","children":null,"spread":false},{"title":"sqlmap.conf <span style='color:#111;'> 20.51KB </span>","children":null,"spread":false},{"title":"runcmd.cpp <span style='color:#111;'> 1.32KB </span>","children":null,"spread":false},{"title":"stdafx.cpp <span style='color:#111;'> 293B </span>","children":null,"spread":false},{"title":"lib_mysqludf_sys.dll_ <span style='color:#111;'> 5.14KB </span>","children":null,"spread":false},{"title":"lib_postgresqludf_sys.dll_ <span style='color:#111;'> 4.66KB </span>","children":null,"spread":false},{"title":"lib_postgresqludf_sys.dll_ <span style='color:#111;'> 4.65KB </span>","children":null,"spread":false},{"title":"lib_postgresqludf_sys.dll_ <span style='color:#111;'> 4.64KB </span>","children":null,"spread":false},{"title":"lib_mysqludf_sys.dll_ <span style='color:#111;'> 4.44KB </span>","children":null,"spread":false},{"title":"lib_postgresqludf_sys.dll_ <span style='color:#111;'> 4.13KB </span>","children":null,"spread":false},{"title":"runcmd.exe_ <span style='color:#111;'> 36.33KB </span>","children":null,"spread":false},{"title":"icmpsh.exe_ <span style='color:#111;'> 6.84KB </span>","children":null,"spread":false},{"title":"shellcodeexec.x32.exe_ <span style='color:#111;'> 2.69KB </span>","children":null,"spread":false},{"title":".gitattributes <span style='color:#111;'> 275B </span>","children":null,"spread":false},{"title":".gitignore <span style='color:#111;'> 77B </span>","children":null,"spread":false},{"title":"stdafx.h <span style='color:#111;'> 516B </span>","children":null,"spread":false},{"title":"index.html <span style='color:#111;'> 5.79KB </span>","children":null,"spread":false},{"title":"data.json <span style='color:#111;'> 58.54KB </span>","children":null,"spread":false},{"title":"stager.jsp_ <span style='color:#111;'> 1.29KB </span>","children":null,"spread":false},{"title":"backdoor.jsp_ <span style='color:#111;'> 359B </span>","children":null,"spread":false},{"title":"LICENSE <span style='color:#111;'> 18.44KB </span>","children":null,"spread":false},{"title":"LICENSE <span style='color:#111;'> 1.37KB </span>","children":null,"spread":false},{"title":"LICENSE <span style='color:#111;'> 1.05KB </span>","children":null,"spread":false},{"title":"CHANGELOG.md <span style='color:#111;'> 32.36KB </span>","children":null,"spread":false},{"title":"THANKS.md <span style='color:#111;'> 24.43KB </span>","children":null,"spread":false},{"title":"THIRD-PARTY.md <span style='color:#111;'> 14.60KB </span>","children":null,"spread":false},{"title":"README.md <span style='color:#111;'> 4.79KB </span>","children":null,"spread":false},{"title":"README-gr-GR.md <span style='color:#111;'> 4.33KB </span>","children":null,"spread":false},{"title":"README-uk-UA.md <span style='color:#111;'> 4.30KB </span>","children":null,"spread":false},{"title":"README-ru-RUS.md <span style='color:#111;'> 4.30KB </span>","children":null,"spread":false},{"title":"README-bg-BG.md <span style='color:#111;'> 4.17KB </span>","children":null,"spread":false},{"title":"README-ja-JP.md <span style='color:#111;'> 3.67KB </span>","children":null,"spread":false},{"title":"README-es-MX.md <span style='color:#111;'> 3.53KB </span>","children":null,"spread":false},{"title":"README-fr-FR.md <span style='color:#111;'> 3.43KB </span>","children":null,"spread":false},{"title":"CONTRIBUTING.md <span style='color:#111;'> 3.42KB </span>","children":null,"spread":false},{"title":"README-it-IT.md <span style='color:#111;'> 3.38KB </span>","children":null,"spread":false},{"title":"README-pl-PL.md <span style='color:#111;'> 3.32KB </span>","children":null,"spread":false},{"title":"README-de-GER.md <span style='color:#111;'> 3.29KB </span>","children":null,"spread":false},{"title":"README-pt-BR.md <span style='color:#111;'> 3.28KB </span>","children":null,"spread":false},{"title":"README-hr-HR.md <span style='color:#111;'> 3.28KB </span>","children":null,"spread":false},{"title":"README-id-ID.md <span style='color:#111;'> 3.16KB </span>","children":null,"spread":false},{"title":"CODE_OF_CONDUCT.md <span style='color:#111;'> 3.14KB </span>","children":null,"spread":false},{"title":"README-tr-TR.md <span style='color:#111;'> 3.13KB </span>","children":null,"spread":false},{"title":"README-zh-CN.md <span style='color:#111;'> 3.03KB </span>","children":null,"spread":false},{"title":"bug_report.md <span style='color:#111;'> 865B </span>","children":null,"spread":false},{"title":"feature_request.md <span style='color:#111;'> 608B </span>","children":null,"spread":false},{"title":"FAQ.pdf <span style='color:#111;'> 304.89KB </span>","children":null,"spread":false},{"title":"README.pdf <span style='color:#111;'> 482.64KB </span>","children":null,"spread":false},{"title":"backdoor.php_ <span style='color:#111;'> 469B </span>","children":null,"spread":false},{"title":"stager.php_ <span style='color:#111;'> 379B </span>","children":null,"spread":false},{"title":"icmpsh-m.pl <span style='color:#111;'> 2.09KB </span>","children":null,"spread":false},{"title":"common.py <span style='color:#111;'> 173.88KB </span>","children":null,"spread":false},{"title":"bottle.py <span style='color:#111;'> 148.98KB </span>","children":null,"spread":false},{"title":"clientform.py <span style='color:#111;'> 123.79KB </span>","children":null,"spread":false},{"title":"xdot.py <span style='color:#111;'> 94.29KB </span>","children":null,"spread":false},{"title":"option.py <span style='color:#111;'> 92.13KB </span>","children":null,"spread":false},{"title":"gprof2dot.py <span style='color:#111;'> 82.17KB </span>","children":null,"spread":false},{"title":"big5freq.py <span style='color:#111;'> 80.66KB </span>","children":null,"spread":false},{"title":"beautifulsoup.py <span style='color:#111;'> 78.12KB </span>","children":null,"spread":false},{"title":"checks.py <span style='color:#111;'> 72.36KB </span>","children":null,"spread":false},{"title":"connect.py <span style='color:#111;'> 65.97KB </span>","children":null,"spread":false},{"title":"agent.py <span style='color:#111;'> 50.54KB </span>","children":null,"spread":false},{"title":"databases.py <span style='color:#111;'> 49.02KB </span>","children":null,"spread":false},{"title":"jisfreq.py <span style='color:#111;'> 46.21KB </span>","children":null,"spread":false},{"title":"hash.py <span style='color:#111;'> 45.34KB </span>","children":null,"spread":false},{"title":"euckrfreq.py <span style='color:#111;'> 44.90KB </span>","children":null,"spread":false},{"title":"cmdline.py <span style='color:#111;'> 42.54KB </span>","children":null,"spread":false},{"title":"settings.py <span style='color:#111;'> 38.93KB </span>","children":null,"spread":false},{"title":"gb2312freq.py <span style='color:#111;'> 35.17KB </span>","children":null,"spread":false},{"title":"euctwfreq.py <span style='color:#111;'> 34.05KB </span>","children":null,"spread":false},{"title":"controller.py <span style='color:#111;'> 32.29KB </span>","children":null,"spread":false},{"title":"inference.py <span style='color:#111;'> 32.04KB </span>","children":null,"spread":false},{"title":"api.py <span style='color:#111;'> 31.79KB </span>","children":null,"spread":false},{"title":"__init__.py <span style='color:#111;'> 31.69KB </span>","children":null,"spread":false},{"title":"target.py <span style='color:#111;'> 31.06KB </span>","children":null,"spread":false},{"title":"entries.py <span style='color:#111;'> 28.42KB </span>","children":null,"spread":false},{"title":"metasploit.py <span style='color:#111;'> 27.75KB </span>","children":null,"spread":false},{"title":"users.py <span style='color:#111;'> 27.72KB </span>","children":null,"spread":false},{"title":"dump.py <span style='color:#111;'> 27.26KB </span>","children":null,"spread":false},{"title":"pyDes.py <span style='color:#111;'> 26.86KB </span>","children":null,"spread":false},{"title":"search.py <span style='color:#111;'> 26.15KB </span>","children":null,"spread":false},{"title":"fcrypt.py <span style='color:#111;'> 26.14KB </span>","children":null,"spread":false},{"title":"identYwaf.py <span style='color:#111;'> 25.27KB </span>","children":null,"spread":false},{"title":"inject.py <span style='color:#111;'> 22.30KB </span>","children":null,"spread":false},{"title":"keepalive.py <span style='color:#111;'> 22.17KB </span>","children":null,"spread":false},{"title":"use.py <span style='color:#111;'> 20.49KB </span>","children":null,"spread":false},{"title":"use.py <span style='color:#111;'> 19.50KB </span>","children":null,"spread":false},{"title":"mbcssm.py <span style='color:#111;'> 19.13KB </span>","children":null,"spread":false},{"title":"jpcntx.py <span style='color:#111;'> 18.89KB </span>","children":null,"spread":false},{"title":"sgmllib.py <span style='color:#111;'> 17.85KB </span>","children":null,"spread":false},{"title":"web.py <span style='color:#111;'> 17.84KB </span>","children":null,"spread":false},{"title":"enumeration.py <span style='color:#111;'> 17.53KB </span>","children":null,"spread":false},{"title":"takeover.py <span style='color:#111;'> 17.43KB </span>","children":null,"spread":false},{"title":"......","children":null,"spread":false},{"title":"<span style='color:steelblue;'>文件过多,未全部展示</span>","children":null,"spread":false}],"spread":true}]

评论信息

免责申明

【只为小站】的资源来自网友分享,仅供学习研究,请务必在下载后24小时内给予删除,不得用于其他任何用途,否则后果自负。基于互联网的特殊性,【只为小站】 无法对用户传输的作品、信息、内容的权属或合法性、合规性、真实性、科学性、完整权、有效性等进行实质审查;无论 【只为小站】 经营者是否已进行审查,用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。
本站所有资源不代表本站的观点或立场,基于网友分享,根据中国法律《信息网络传播权保护条例》第二十二条之规定,若资源存在侵权或相关问题请联系本站客服人员,zhiweidada#qq.com,请把#换成@,本站将给予最大的支持与配合,做到及时反馈和处理。关于更多版权及免责申明参见 版权及免责申明