burp penetration testing

ciphertext with the plaintext (0x ciphertext) 3. Save the Download number "Drag library" ' Union select NULL, CONCAT (User,0x3a,password) from the users into OUTFILE '/tmp/a.db '--+ #若没有文件包含之类的漏洞可以下载拖库文件, by limiting the number of queries, step-by-step replication of the paste for data theft when uploading Webshell cannot achieve the purpose of the operation, can write server-side code, for their own use #对目标有足够了解, database structure, table structure, programming logic method Create a form, i

Server:ns1.sina.com.cnName Server:ns2.sina.com.cnName Server: Ns3.sina.com.cnName Server:ns4.sina.com.cnRegistration Time:1998- One- - xx:xx:xxExpiration Time:2019- A-Geneva the: +: *dnssec:unsignedThe results of the WHOIS return include information about the DNS server and the registrant's contact details, registration time and expiry time, and so on.Three. DNS Record analysisTo find all the hosts and IPs under the domain name, you can use a few tools belowNote: DNS records are divided into t