请求设置

DeeLMind大约 3 分钟

请求设置

Request: 请求 These options can be used to specify how to connect to the target URL sqlmap发出自定义请求

--method=METHOD Force usage of given HTTP method (e.g. PUT) GET HEAD POST PUT DELETE CONNECT OPTIONS TRACE PATCH

--data=DATA
Data string to be sent through POST 指定POST的参数

--param-del=PARA.. Character used for splitting parameter values id=1&pass=123 这个拆分一些参数的,如下面用;拆分post参数 python sqlmap.py -u "http://www.target.com/vuln.php" --method=post --data="id=1&pass=123"

--cookie=COOKIE HTTP Cookie header value 指定cookie值

--cookie-del=COO.. Character used for splitting cookie values 指定分割cookie值的字符

--load-cookies=L.. File containing cookies in Netscape/wget format 这个是从文件中读取cookie吧,Netscape/wget格式的

Netscape HTTP Cookie File

http://curl.haxx.se/rfc/cookie_spec.html

This file was generated by EditThisCookie

URL: https://www.taobao.com/

.taobao.com FALSE / FALSE 1506653985.701691 cc VTcL3FSpdA%3D%3D .taobao.com FALSE / FALSE l_g Ug%3D%3D .taobao.com FALSE / FALSE nk ********* .taobao.com FALSE / FALSE tb_token adb108c61f3f .taobao.com FALSE / FALSE 1694321569.582931 ali_ab 121.14.96.125.1378961569676.2 .taobao.com FALSE / FALSE 1689302468.418356 cna bd83adb108c61f3fd48f12fa .taobao.com FALSE / FALSE cookie1 BD83ADB108C61F3FD48F12FA7C88A7F5FD01D

--drop-set-cookie Ignore Set-Cookie header from response 忽略响应包的Set-Cookie头

--user-agent=AGENT HTTP User-Agent header value 指定User-Agent用户代理 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.94 Chrome/37.0.2062.94 Safari/537.36 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/8.0.8 Safari/600.8.9 Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H321 Safari/600.1.4 Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240 Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36

--random-agent Use randomly selected HTTP User-Agent header value 随机选用sqlmap目录中的User-Agent

--host=HOST HTTP Host header value

--referer=REFERER HTTP Referer header value

-H HEADER, --hea.. Extra header (e.g. "X-Forwarded-For: 127.0.0.1") 指定某个头部,如: -H "X-Forwarded-For: 127.0.0.1"

--headers=HEADERS Extra headers (e.g. "Accept-Language: fr\nETag: 123") 这个的话应该是可以指定多个,用\n分割 -H "X-Forwarded-For: 127.0.0.1\nXXX: PPP"

--auth-type=AUTH.. HTTP authentication type (Basic, Digest, NTLM or PKI) 指定http认证类型

--auth-cred=AUTH.. HTTP authentication credentials (name:password) 指定http认证的账户名和密码,就行apache就可以设置访问某个目录时要认证

--auth-file=AUTH.. HTTP authentication PEM cert/private key file 指定一个私钥文件来认证

--ignore-401 Ignore HTTP Error 401 (Unauthorized)

--proxy=PROXY Use a proxy to connect to the target URL --proxy-cred=PRO.. Proxy authentication credentials (name:password) --proxy-file=PRO.. Load proxy list from a file

--ignore-proxy Ignore system default proxy settings --tor Use Tor anonymity network --tor-port=TORPORT Set Tor proxy port other than default --tor-type=TORTYPE Set Tor proxy type (HTTP, SOCKS4 or SOCKS5 (default)) --check-tor Check to see if Tor is used properly --delay=DELAY Delay in seconds between each HTTP request 设置每个HTTP请求的时间间隔

--timeout=TIMEOUT Seconds to wait before timeout connection (default 30) 设置超时时间,默认30秒

--retries=RETRIES Retries when the connection timeouts (default 3) 设置重试的次数,默认3次

--randomize=RPARAM Randomly change value for given parameter(s) 随机地更改给定参数的值,sqlmap -u url.com/?id=1 --randomize=id

--safe-url=SAFEURL URL address to visit frequently during testing 有的web应用程序会在你多次访问错误的请求时屏蔽掉你以后的所有请求 这里提供一个安全不错误的连接,每隔一段时间都会去访问一下

--safe-post=SAFE.. POST data to send to a safe URL 这里设置一个正确的post数据

--safe-req=SAFER.. Load safe HTTP request from a file 从文件中读取安全,或者叫正确的http请求

--safe-freq=SAFE.. Test requests between two visits to a given safe URL 设置访问安全url的时间间隔

--skip-urlencode Skip URL encoding of payload data 不进行url编码

--csrf-token=CSR.. Parameter used to hold anti-CSRF token --csrf-url=CSRFURL URL address to visit to extract anti-CSRF token --force-ssl Force usage of SSL/HTTPS --hpp Use HTTP parameter pollution method 参数污染 ?id=cmd&id=aa

--eval=EVALCODE Evaluate provided Python code before the request "import hashlib;id2=hashlib.md5(id).hexdigest()") 发送请求之前,先运行这段python代码,比如对某个参数进行处理 比如下面的,hash参数就是id的md5值 python sqlmap.py -u "http://www.target.com/vuln.php?id=1&hash=c4ca4238a0b923820dcc509a6f75849b" --eval="import hashlib;hash=hashlib.md5(id).hexdigest()"

上次编辑于:
贡献者: DeeLMind