SQL注入点自动化利用测试工具—shoryuken
5328 点击·3 回帖
灯火互联
楼主
 |  | |
 | 仅用于安全研究/教学演示之用，禁止非法用途！ shoryuken是一款linux bash工具，可以对存在SQL注入漏洞的主机（且未站库分离）进行自动化利用测试，简化了繁琐的手工操作。值得一提的是，由于适用于注入点的渗透测试，这个工具可能需要应用具有较高的数据库权限（SAor System）。 图片：20130221090835445.jpg  选项 -h help -i interactive mode -p direct punch -t test mode -l testfrom list 实例 ./shoryuken1.1 -i ./shoryuken1.1 -p"192.168.0.2/test.asp?id=1" ./shoryuken1.1 -p "vuln-site.net/home/news.php?info=text;vuln_param=11230" ./shoryuken1.1 -t"www.example.com/page.php?name=john" ./shoryuken1.1 -l mytargets.txtresults.txt" 特点 - Very simple to use; - Very small (just 8k) e portable; - Can beeasily used in tiny linux systems like mobile ones; - Pwns MySQL and MSSQLsystems at once; - Doesn't need to download/upload anything to target; -Doesn't need an extra open port on machine or firewall; - Can be easily usedwhen pivoting over linux machines; - Minimum footprinting in Test Mode (1request); - Auto cleaning (except for logs); - Impressive hacking topeople that lacks hacking/security knowledge 亲！本部分内容设定了隐藏,需要回复后才能看到. 请先注册! 再回帖! 免费下载上千GB的课程. | |
 |  |
