LxiaoGirl / sqlmapTamper

测试过程中需要绕过各种waf或者全局的过滤机制,因此编写各种适合的tamper。
GNU General Public License v2.0
52 stars 31 forks source link

thinkphp0day.py有问题 #2

Open 687766616e opened 5 years ago

687766616e commented 5 years ago

--tamper think --os-shell SELECT * FROM xxx WHERE xxxxx = 1 ORDER BY xxxx DESC LIMIT 0,20

[DEBUG] encoding file to its hexadecimal string value
[DEBUG] forging SQL statements to write the hexadecimal encoded file to the support table
[DEBUG] inserting the hexadecimal encoded file to the support table
[PAYLOAD] xXxX/**/Desc;SeT/**/gLOBAL/**/max_allowed_packet/**/=/**/1048576#
[CRITICAL] error occurred while running tamper function 'think' (''ascii' codec can't decode byte 0xf8 in position 69: ordinal not in range(128)')
[WARNING] HTTP error codes detected during run:
404 (Not Found) - 3 times

https://github.com/LxiaoGirl/ThinkPHPSQL0day https://sourceforge.net/p/sqlmap/mailman/message/28396309/ https://github.com/sqlmapproject/sqlmap/issues/3406 怎么解决?

687766616e commented 5 years ago

@LxiaoGirl