sqlifuzzer 介绍
sqlifuzzer 是一个在命令行下用来挖掘Web网站的SQLi漏洞的工具。
====================================================== 3:09:54 PM http://192.168.182.136:80 ====================================================== POST /orangehrm/menu.php?TEST=1111 HTTP/1.1 Host: 192.168.182.136 Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Referer: http://192.168.182.136/orangehrm/index.php Content-Type: application/x-www-form-urlencoded Content-Length: 62 Cookie: PHPSESSID=bf7u0ad95cbubpcvdjda2bqro3; Loggedin=True; EliteNinja=False module=Home&action=UnifiedSearch&search_form=false&tabnumber=1 ======================================================