DVWA靶场暴力破解

最新推荐文章于 2024-07-23 16:52:49 发布

欲望川

最新推荐文章于 2024-07-23 16:52:49 发布

阅读量287

点赞数

本文链接：https://blog.csdn.net/qq_52223347/article/details/111869987

版权

DVWA暴力破解

等级：low

设置等级low

这里sql注入也是可以的，看一下源码

<?php

if( isset( $_GET[ 'Login' ] ) ) {
// Get username
$user = $_GET[ 'username' ];

// Get password
$pass = $_GET[ 'password' ];
$pass = md5( $pass );

// Check the database
$query  = "SELECT * FROM `users` WHERE user = '$user' AND password = '$pass';";
$result = mysqli_query($GLOBALS["___mysqli_ston"],  $query ) or die( '<pre>' . ((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)) . '</pre>' );

if( $result && mysqli_num_rows( $result ) == 1 ) {
    // Get users details
    $row    = mysqli_fetch_assoc( $result );
    $avatar = $row["avatar"];

    // Login successful