鍚屾椂鏀瑰ソ鏁版嵁搴撶殑鍚嶅瓧鍜屽瘑鐮,璁块棶鍒癲vwa杩欎釜鏂囦欢澶癸紝鍒涘缓涓涓嬪氨鍙互銆
鐒跺悗鐧诲綍锛岀敤鎴峰悕鏄痑dmin瀵嗙爜鏄痯assword
椤轰究鎶婂畨鍏ㄦф敼涓簂ow
sqlmap鏄竴绉嶅紑鏀炬簮鐮佹笚閫忔祴璇曞伐鍏凤紝鍙嚜鍔ㄦ娴嬪拰鍒╃敤SQL娉ㄥ叆婕忔礊鍜屾帴绠℃暟鎹簱鏈嶅姟鍣ㄧ殑杩囩▼銆傚畠閰嶅浜嗗己澶х殑妫娴嬪紩鎿庯紝璁稿閫傜敤浜庢渶缁堟笚閫忔祴璇曚华鐨勭壒鑹插姛鑳斤紝浠ュ強鏁版嵁搴撴寚绾硅瘑鍒紝浠庢暟鎹簱鑾峰彇鏁版嵁鍒拌闂簳灞傛枃浠剁郴缁熶互鍙婂湪鎿嶄綔绯荤粺涓婃墽琛屽懡浠ょ殑骞挎硾寮鍏筹紝甯﹀唴杩炴帴銆
璇濅笉澶氳锛屽厛鍒癵ithub涓婁笅杞戒竴涓
git clone https://github.com/sqlmapproject/sqlmap.git
涓嬭浇瀹屽氨鍙互杩愯浠栦簡锛屼笉杩囧墠鎻愭槸浣犵殑鐢佃剳涓婂緱鏈塸ython浠涔堢殑锛2.7鐨勭増鏈氨鍙互浜嗐
鎺ヤ笅鏉ユ垜浠渶瑕佸垱寤轰竴涓嫢鏈夋紡娲炵殑缃戠珯锛圖VWA锛夈
git clone https://github.com/ethicalhack3r/DVWA.git
涓嬭浇瀹屽彲浠ヨ烦鍒癱onfig鏂囦欢澶逛笅鎶奵onfig.inc.php.dist澶嶅埗涓浠芥敼涓篶onfig.inc.php
鍚屾椂鏀瑰ソ鏁版嵁搴撶殑鍚嶅瓧鍜屽瘑鐮,璁块棶鍒癲vwa杩欎釜鏂囦欢澶癸紝鍒涘缓涓涓嬪氨鍙互銆
鐒跺悗鐧诲綍锛岀敤鎴峰悕鏄痑dmin瀵嗙爜鏄痯assword
椤轰究鎶婂畨鍏ㄦф敼涓簂ow
鎺ヤ笅鏉ョ偣鍑籗QL Injection 杈撳叆1 鎻愪氦 锛岀劧鍚庡鍒秛rl锛屽鍒禼ookie鍊硷紝椤轰究sqlmap瑕佽缃竴涓嬬幆澧冨彉閲
sqlmap.py -u “url” –cookie=”cookie”
杩欎釜鏃跺欏氨鎴愬姛浜嗭紝鍏朵粬瑕佽幏鍙栨暟鎹簱鐨勪粈涔堝煎彲浠ヨ嚜宸辩爺绌朵竴涓嬶紝鎴戝垰瀛﹀畬涔熶笉澶寰椾綇
鍙寰 -s淇濆瓨涓烘枃浠 –dbs 鍒楀嚭鏁版嵁搴 –tables鍒楀嚭鏁版嵁琛 –dump-all鍒楀嚭鎵鏈夌殑鏁版嵁
sqlmap.py -g鏄氳繃google鎼滅储缃戠珯涓婄殑閾炬帴鐨勬紡娲 杩欎釜瑕乧md缈诲
鍙互涓嬭浇涓涓狿roxifier
缁欎綘涓涓櫨搴﹂摼鎺ュソ浜
閾炬帴锛歨ttp://pan.baidu.com/s/1i4AvhEt 瀵嗙爜锛歾mu2
涓嬭浇瀹屼笂缃戦殢渚挎悳涓簭鍒楃爜
鐐瑰嚮Proxy Server鎸夐挳
add
杈撳叆鏈湴shadowshocks鐨刬p锛堥粯璁127.0.0.1锛夊拰绔彛锛堥粯璁1080锛
閫夋嫨SHOCKS Versin 5
鐒跺悗鐐瑰嚮check
OK
鏄剧ずProxy is ready to work with Proxfier! 鍒欐姝ラ閰嶇疆鎴愬姛锛屽惁鍒欒鐪熸鏌ョ鍙ｆ槸鍚︽纭互鍙妔hadowsocks鏄惁杩愯銆
鐐瑰嚮Proxification Rule
閫変腑localhost,鐐瑰嚮Edit
Target hosts澶勬坊鍔爏hadowshocks浠ｇ悊鏈嶅姟鍣ㄧ殑IP鍦板潃锛堜互123.123.123.123绀轰緥锛
Action閫夋嫨Direct(鐩磋繛)
OK
鐐瑰嚮Name Resolution
閫夋嫨绗簩涓猂esolve hostnames through proxy锛堥氳繃浠ｇ悊鏈嶅姟鍣ㄨВ鏋愬煙鍚嶏級
OK
鐒跺悗灏卞彲浠ヤ簡
鍐欏緱濂斤紒
[…] 澶╂湞鏃犳硶鐩存帴杩炴帴鍒皌or缃戠粶锛屾墍浠ラ渶瑕佸墠缃唬鐞嗭紝鎴戠敤鐨勬槸shadowsocks锛岃繖閲屼笉鍋氳繃澶氱殑瑙ｉ噴锛屼笉杩囧洜涓虹敤浜唖hadowsocks杩樻槸娌″姙娉曞湪cmd閲岄潰鐩存帴璁块棶tor缃戠粶锛屾墍浠ラ渶瑕佷娇鐢≒roxifier锛屾垜鍓嶉潰鏂囩珷sqlmap +dvwa +Proxifier 瀹屾暣锛堝ぇ姒傦級鏁欑▼鏈夊ぇ姒備粙缁嶅埌锛屼笉濡ㄤ竴鐪嬨 […]