A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Last update: Nov 09, 2022

Overview

TraverseFilesBySQLInjection

基于sqlmap的利用sql注入漏洞遍历文件是否存在的脚本
A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

usage

需要注意，在盲注时如果开启多线程会导致不稳定
It should be noted that if multi-threading is enabled during blind injection, it will cause instability

usage: test2.py [-h] [-u URL | -r HEADERS_DATA] [-w FILE] [-t THREADS]

By zongdeiqianxing; Email: [email protected]

optional arguments:
  -h, --help       show this help message and exit
  -u URL
  -r HEADERS_DATA  HTTP request header
  -w FILE          wordlist containing file path
  -t THREADS       threads count

show

$ python3 TraverseFilesBySQLInjection.py -r 1.txt -w linux.txt 
2021-10-23 23:01:51,211 - __main__ - INFO - The program has been started, if found readable files, it will be displayed, please wait..
2021-10-23 23:02:21,234 - __main__ - INFO - /etc/hosts file exists
2021-10-23 23:02:41,058 - __main__ - INFO - /etc/hostname file exists
2021-10-23 23:03:00,863 - __main__ - INFO - /etc/passwd file exists

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Related tags

Overview

TraverseFilesBySQLInjection

usage

show

Owner

A Python & JavaScript Obfuscator made in Python 3.

SPV SecurePasswordVerification

Cookiecutter for creating open source Python packages

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Tor Relay availability checker, for using it as a bridge in countries with censorship

A small Minecraft server to help players detect vulnerability to the Log4Shell exploit 🐚

Scan publicly accessible assets on your AWS cloud environment

Unicode fuzzer for various purposes

orfipy is a tool written in python/cython to extract ORFs in an extremely and fast and flexible manner

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.

Big-Papa Integrates Javascript and python for remote cookie stealing which then can be used for session hijacking

Python tool for enumerating directories and for fuzzing

NexScanner is a tool which allows you to scan a website and find the admin login panel and sub-domains

This repository is one of a few malware collections on the GitHub.

LinOTP - the open source solution for two factor authentication

This is a simple PoC for the newly found Polkit error names PwnKit

StarUML cracker - StarUML cracker With Python

client attack remotely , this script was written for educational purposes only

Webpack自动化信息收集

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source