kali弱点分析工具之BBQSQL
来源:互联网 发布:长得漂亮一直单身知乎 编辑:程序博客网 时间:2024/05/22 16:41
Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don’t you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues.
BBQSQL is a blind SQL injection framework written in Python. It is extremely useful when attacking tricky SQL injection vulnerabilities. BBQSQL is also a semi-automatic tool, allowing quite a bit of customization for those hard to trigger SQL injection findings. The tool is built to be database agnostic and is extremely versatile. It also has an intuitive UI to make setting up attacks much easier. Python gevent is also implemented, making BBQSQL extremely fast.
Similar to other SQL injection tools you provide certain request information.
一款半自动化的SQL 注入工具,归属于WEB攻击工具库数据库攻击工具SQL注入
root@kali:~# bbqsql
_ _ _ _ _ _
| \ | \ / \ / \ / \ | \
|
|
|
_.(-)._ .' '. / 'or '1'='1 \ |'-...___...-'| \ '=' / `'._____.'` / | \ /.--'|'--.\ []/'-.__|__.-'\[] | [] BBQSQL injection toolkit (bbqsql) Lead Development: Ben Toews(mastahyeti) Development: Scott Behrens(arbit) Menu modified from code for Social Engineering Toolkit (SET) by: David Kennedy (ReL1K) SET is located at: http://www.secmaniac.com(SET) Version: 1.0 The 5 S's of BBQ: Sauce, Spice, Smoke, Sizzle, and SQLi
Select from the menu:
1) Setup HTTP Parameters
2) Setup BBQSQL Options
3) Export Config
4) Import Config
5) Run Exploit
6) Help, Credits, and About
99) Exit the bbqsql injection toolkit
bbqsql>
- kali弱点分析工具之BBQSQL
- kali弱点分析工具之BED
- kali弱点分析工具之DBPwAudit
- SQL盲注工具BBQSQL
- kali无线安全分析工具
- kali搜集工具之CDPSnarf
- Pixy - PHP 原始码的弱点分析工具
- 小白日记15:kali渗透测试之弱点扫描-漏扫三招、漏洞管理、CVE、CVSS、NVD
- 小白日记16:kali渗透测试之弱点扫描-openvas、nessus
- kali信息收集工具之acccheck
- kali信息收集工具之ace-voip
- kali信息收集工具之Amap
- kali信息收集工具之Automater
- kali信息搜集工具之bing-ip2hosts
- kali信息收集工具之Braa
- kali信息搜集工具之CaseFile
- kali信息收集工具之cisco-torch
- kali信息收集工具之Cookie Cadger
- 利用位操作实现简单的功能
- 遍历Map的四种方法
- PostgreSQL开启远程连接功能
- Python(9)
- (2)IO流
- kali弱点分析工具之BBQSQL
- 家用宽带设置虚拟机共享上网
- Android中的Fragment ---- 05(Activity和Fragment之间的通信)
- Linux从不懂得到熟练之路(一)
- generator自动生成mybatis的xml配置
- Spring学习笔记----JdbcTemplet和NamedParameterJdbcTemplate的使用
- 二路归并算法
- MongoDB常用操作总结
- Java与C++的异同比较[一]