a5656456 发表于 2020-4-12 16:41:26

SQLI DUMPER V9.7批量GETSHELL破解版

很多使用起来的顺手的工具都是俄罗斯黑客开发的,日后安三会尝试多分享一些国外经典好用的安全测试工具,从代码严谨和功能实现上确实比国内很多“随手之作”好很多。这款SQLi Dumper v9.7批量Getshell工具就是俄罗斯黑客的一种批量注入工具,支持多个搜索引擎批量,支持URL,发布,cookies多种注入方式,支持多线程转储数据,支持代理功能等等。功能实在是强大到秒杀很多国内SQL自动检测工具,有兴趣的可以研究下,

--支持的注入– MySQL – Union (Integer / String) – Error (Integer / String) ** Error Methods: – Double Query – XPATH – ExtractValue – XPATH – UpdateXML – Brute Forcing – Blind – Load File – Load File Scanner ** Illegal Mix Of Collations: – UnHexHex() – Binary() – Cast As Char – Compress(Uncompress()) – Convert Using utf8 – Convert Using latin1 – Aes_decrypt(aes_encrypt()) – MS SQL – Union (Integer / String) – Error (Integer / String) ** Illegal Mix Of Collations: – SQL_Latin1; – Cast As Char. – Oracle – Union (Integer / String) – Error (Integer / String) ** Error Methods: – GET_HOST_ADDRESS – DRITHSX.SN – GET;APPINGXPATH. ** Illegal Mix Of Collations: – Cast As Char. ** Suports TOP N Types: – ROWUM – RANK() – DESE_RANK() ** Analizer detects also: – MS Access – PostgredSQL – Sybase



页: [1]
查看完整版本: SQLI DUMPER V9.7批量GETSHELL破解版