A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Last update: Nov 9, 2022

Overview

TraverseFilesBySQLInjection

基于sqlmap的利用sql注入漏洞遍历文件是否存在的脚本
A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

usage

需要注意，在盲注时如果开启多线程会导致不稳定
It should be noted that if multi-threading is enabled during blind injection, it will cause instability

usage: test2.py [-h] [-u URL | -r HEADERS_DATA] [-w FILE] [-t THREADS]

By zongdeiqianxing; Email: [email protected]

optional arguments:
  -h, --help       show this help message and exit
  -u URL
  -r HEADERS_DATA  HTTP request header
  -w FILE          wordlist containing file path
  -t THREADS       threads count

show

$ python3 TraverseFilesBySQLInjection.py -r 1.txt -w linux.txt 
2021-10-23 23:01:51,211 - __main__ - INFO - The program has been started, if found readable files, it will be displayed, please wait..
2021-10-23 23:02:21,234 - __main__ - INFO - /etc/hosts file exists
2021-10-23 23:02:41,058 - __main__ - INFO - /etc/hostname file exists
2021-10-23 23:03:00,863 - __main__ - INFO - /etc/passwd file exists

You might also like...

Safety checks your installed dependencies for known security vulnerabilities

Safety checks your installed dependencies for known security vulnerabilities. By default it uses the open Python vulnerability database Safety DB, but

1.4k Dec 30, 2022

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

This project is no longer maintained March 2020 Update: Please go see the amazing Pysa tutorial that should get you up to speed finding security vulne

2.1k Dec 25, 2022

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

The SCodeScanner stands for Source Code Scanner, where you can scan your source code files like PHP and get identify the vulnerabilities inside it. The tool can use by Pentester, Developer to quickly identify the weakness.

136 Dec 13, 2022

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Related tags

Overview

TraverseFilesBySQLInjection

usage

show

You might also like...

Safety checks your installed dependencies for known security vulnerabilities

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

SSRF search vulnerabilities exploitation extended.

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

Something I built to test for Log4J vulnerabilities on customer networks.

Visibility and Mitigation for Log4J vulnerabilities

ORector - A Fast Python tool designed to detect open redirects vulnerabilities on websites

Owner

MongoDB-Injection - This challenge-script is custom-made for web-server running MongoDB which is vulnerable to No-SQL injection

WebScan is a web vulnerability Scanning tool, which scans sites for SQL injection and XSS vulnerabilities

A blind SQL injection script that uses binary search aka bisection method to dump datas from database.

Binary check tool to identify command injection and format string vulnerabilities in blackbox binaries

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Automatic SQL injection and database takeover tool

CVE-2022-23046 - SQL Injection Vulnerability on PhpIPAM v1.4.4

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities.

Small python script to look for common vulnerabilities on SMTP server.