sqlmap +dvwa +Proxifier 瀹屾暣锛堝ぇ姒傦級鏁欑▼

sqlmap鏄竴绉嶅紑鏀炬簮鐮佹笚閫忔祴璇曞伐鍏凤紝鍙嚜鍔ㄦ娴嬪拰鍒╃敤SQL娉ㄥ叆婕忔礊鍜屾帴绠℃暟鎹簱鏈嶅姟鍣ㄧ殑杩囩▼銆傚畠閰嶅浜嗗己澶х殑妫娴嬪紩鎿庯紝璁稿閫傜敤浜庢渶缁堟笚閫忔祴璇曚华鐨勭壒鑹插姛鑳斤紝浠ュ強鏁版嵁搴撴寚绾硅瘑鍒紝浠庢暟鎹簱鑾峰彇鏁版嵁鍒拌闂簳灞傛枃浠剁郴缁熶互鍙婂湪鎿嶄綔绯荤粺涓婃墽琛屽懡浠ょ殑骞挎硾寮鍏筹紝甯﹀唴杩炴帴銆

sqlmap

璇濅笉澶氳锛屽厛鍒癵ithub涓婁笅杞戒竴涓

git clone https://github.com/sqlmapproject/sqlmap.git

涓嬭浇瀹屽氨鍙互杩愯浠栦簡锛屼笉杩囧墠鎻愭槸浣犵殑鐢佃剳涓婂緱鏈塸ython浠涔堢殑锛2.7鐨勭増鏈氨鍙互浜嗐

dvwa

鎺ヤ笅鏉ユ垜浠渶瑕佸垱寤轰竴涓嫢鏈夋紡娲炵殑缃戠珯锛圖VWA锛夈

git clone https://github.com/ethicalhack3r/DVWA.git

涓嬭浇瀹屽彲浠ヨ烦鍒癱onfig鏂囦欢澶逛笅鎶奵onfig.inc.php.dist澶嶅埗涓浠芥敼涓篶onfig.inc.php
鍚屾椂鏀瑰ソ鏁版嵁搴撶殑鍚嶅瓧鍜屽瘑鐮,璁块棶鍒癲vwa杩欎釜鏂囦欢澶癸紝鍒涘缓涓涓嬪氨鍙互銆
鐒跺悗鐧诲綍锛岀敤鎴峰悕鏄痑dmin瀵嗙爜鏄痯assword
椤轰究鎶婂畨鍏ㄦф敼涓簂ow
瀹夊叏鎬т负浣庣殑dvwa

鎺ヤ笅鏉ョ偣鍑籗QL Injection 杈撳叆1 鎻愪氦 锛岀劧鍚庡鍒秛rl锛屽鍒禼ookie鍊硷紝椤轰究sqlmap瑕佽缃竴涓嬬幆澧冨彉閲

sqlmap.py -u “url” –cookie=”cookie”

杩欎釜鏃跺欏氨鎴愬姛浜嗭紝鍏朵粬瑕佽幏鍙栨暟鎹簱鐨勪粈涔堝煎彲浠ヨ嚜宸辩爺绌朵竴涓嬶紝鎴戝垰瀛﹀畬涔熶笉澶寰椾綇
鍙寰 -s淇濆瓨涓烘枃浠 –dbs 鍒楀嚭鏁版嵁搴 –tables鍒楀嚭鏁版嵁琛 –dump-all鍒楀嚭鎵鏈夌殑鏁版嵁

sqlmap.py -g鏄氳繃google鎼滅储缃戠珯涓婄殑閾炬帴鐨勬紡娲 杩欎釜瑕乧md缈诲

Proxifier

鍙互涓嬭浇涓涓狿roxifier
缁欎綘涓涓櫨搴﹂摼鎺ュソ浜
閾炬帴锛歨ttp://pan.baidu.com/s/1i4AvhEt 瀵嗙爜锛歾mu2
涓嬭浇瀹屼笂缃戦殢渚挎悳涓簭鍒楃爜

閰嶇疆绗竴姝

鐐瑰嚮Proxy Server鎸夐挳
add
杈撳叆鏈湴shadowshocks鐨刬p锛堥粯璁127.0.0.1锛夊拰绔彛锛堥粯璁1080锛
閫夋嫨SHOCKS Versin 5
鐒跺悗鐐瑰嚮check
OK

鏄剧ずProxy is ready to work with Proxfier! 鍒欐姝ラ閰嶇疆鎴愬姛锛屽惁鍒欒鐪熸鏌ョ鍙f槸鍚︽纭互鍙妔hadowsocks鏄惁杩愯銆

閰嶇疆绗簩姝

鐐瑰嚮Proxification Rule
閫変腑localhost,鐐瑰嚮Edit
Target hosts澶勬坊鍔爏hadowshocks浠g悊鏈嶅姟鍣ㄧ殑IP鍦板潃锛堜互123.123.123.123绀轰緥锛
Action閫夋嫨Direct(鐩磋繛)
OK

閰嶇疆绗笁姝

鐐瑰嚮Name Resolution
閫夋嫨绗簩涓猂esolve hostnames through proxy锛堥氳繃浠g悊鏈嶅姟鍣ㄨВ鏋愬煙鍚嶏級
OK

鐒跺悗灏卞彲浠ヤ簡

All posts

Other pages

2鏉″洖搴旓細“sqlmap +dvwa +Proxifier 瀹屾暣锛堝ぇ姒傦級鏁欑▼”

  1. niro璇撮亾锛

    鍐欏緱濂斤紒

  2. […] 澶╂湞鏃犳硶鐩存帴杩炴帴鍒皌or缃戠粶锛屾墍浠ラ渶瑕佸墠缃唬鐞嗭紝鎴戠敤鐨勬槸shadowsocks锛岃繖閲屼笉鍋氳繃澶氱殑瑙i噴锛屼笉杩囧洜涓虹敤浜唖hadowsocks杩樻槸娌″姙娉曞湪cmd閲岄潰鐩存帴璁块棶tor缃戠粶锛屾墍浠ラ渶瑕佷娇鐢≒roxifier锛屾垜鍓嶉潰鏂囩珷sqlmap +dvwa +Proxifier 瀹屾暣锛堝ぇ姒傦級鏁欑▼鏈夊ぇ姒備粙缁嶅埌锛屼笉濡ㄤ竴鐪嬨 […]

鍙戣〃璇勮

鐢靛瓙閭欢鍦板潃涓嶄細琚叕寮銆 蹇呭~椤瑰凡鐢*鏍囨敞