Search for a website SQL Injection Vulnerability (DBA permission)

Search for a website SQL Injection Vulnerability (DBA permission)

Search for a website SQL Injection Vulnerability (DBA permission)

Vulnerability addresses: http://oa.xywy.com/

We will capture packets and modify the user name

And then drop the ing sqlmap.
Code Region
Sqlmap. py-r 4.txt -- tamper space2comment. py, base64encode. py-p loginCode -- level 5 -- risk 3 -- dbms mssql --
Dbs
Database

This permission looks comfortable.

View ip

Let's go to the Intranet .. Well, you don't have a server in your hand. Otherwise, you can try to download and run the trojan remotely .. Let's look at the table segment.

More than 1000. Well, Baidu gold and the software database dictionary did not find logon.