SECURITY RESEARCH / ENGINEERING

文章与研究

在证据与实验中理解复杂系统。

NMAP查找SQL注入脚本

https://svn.nmap.org/nmap/scripts/http-sql-injection.nse local http = require "http" local httpspider = require "httpspider" local io = require "io" local nmap = require "nmap" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local table = require "table" local url = require "url" description = [[ Spiders an HTTP server looking for URLs containing queries vulnerable to an SQL injection attack. It also extracts forms from found websites and tries to identify fields that are vulnerable. The script spiders an HTTP server looking for URLs containing queries. It then proceeds to combine crafted SQL commands with......

阅读全文 →

NMAP查找SQL注入脚本

https://svn.nmap.org/nmap/scripts/http-sql-injection.nse local http = require "http" local httpspider = require "httpspider" local io = require "io" local nmap = require "nmap" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local table = require "table" local url = require "url" description = [[ Spiders an HTTP server looking for URLs containing queries vulnerable to an SQL injection attack. It also extracts forms from found websites and tries to identify fields that are vulnerable. The script spiders an HTTP server looking for URLs containing queries. It then proceeds to combine crafted SQL commands with......

阅读全文 →

BlackSpider 6.7 更新 Demo视频

BlackSpider6.7更新内容 1、数据库重构 2、界面优化 3、解决bugs 4、优化效率问题 5、加入加载功能 6、加入动态数据检索功能 7、解决参数过多问题(清除参数在树形结构显示 但是还可以从动态检索获取 或者直接从数据库查看) 高清视频下载......

阅读全文 →