mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-07-25 15:39:48 +03:00
fix web ui bug and modify readme.md file.
This commit is contained in:
Name
parent
2848f413c1
commit
04a41f99b8
144
README.md
144
README.md
|
|
@ -1,77 +1,97 @@
|
|||
# sqlmap 
|
||||
# mySqlmapp - base on sqlmap and scan task manager web ui Injection Scanner
|
||||
|
||||
[](https://github.com/sqlmapproject/sqlmap/actions/workflows/tests.yml) [](https://www.python.org/) [](https://raw.githubusercontent.com/sqlmapproject/sqlmap/master/LICENSE) [](https://twitter.com/sqlmap)
|
||||
mySqlmapp is a forked and modified version of sqlmap, a popular SQL injection scanner. This fork aims to enhance the functionality of sqlmap by adding web-based task management capabilities. It allows users to manage their scanning tasks directly through a web interface, providing features such as task activation, pausing, termination, and deletion. Additionally, users can view task logs, identify injection points, and easily access payload details.
|
||||
|
||||
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switches including database fingerprinting, over data fetching from the database, accessing the underlying file system, and executing commands on the operating system via out-of-band connections.
|
||||
We have also developed a Java-based Burp Suite client plugin that simplifies the process of submitting scanning tasks. This plugin seamlessly integrates with Burp Suite, enabling users to submit tasks directly from within the application.
|
||||
|
||||
Screenshots
|
||||
## Features
|
||||
|
||||
- Web-based task management: Easily manage SQL injection scanning tasks through a user-friendly web interface.
|
||||
- Task control: Start, pause, terminate, and delete scanning tasks as needed.
|
||||
- Task logs: View detailed logs for each scanning task, allowing for effective troubleshooting and analysis.
|
||||
- Injection point identification: Clearly identify injection points in the scanned application.
|
||||
- Payload details: Conveniently access and review payload details for each injection point.
|
||||
- Burp Suite integration: Utilize our Java-based Burp Suite client plugin to streamline the submission of scanning tasks.
|
||||
|
||||
## Installation
|
||||
|
||||
To get started with mySqlmap, follow these steps:
|
||||
|
||||
### 1. Clone the mySqlmap repository from GitHub:
|
||||
```shell
|
||||
git clone https://github.com/yourusername/mySqlmap.git
|
||||
```
|
||||
### 2. Ensure that you have Python [3.7+] installed.
|
||||
|
||||
### 3. Configuring the Web-Based Task Management Interface
|
||||
|
||||
#### 3.1. Open a command prompt or terminal and navigate to the root directory of the project.
|
||||
|
||||
#### 3.2. Execute the following command to start the mySqlmap API server:
|
||||
```shell
|
||||
python sqlmapapi.py -s
|
||||
```
|
||||
|
||||
#### 3.3. Once the server is running, open a web browser (Google Chrome is recommended) and enter the following URL:[mySqlmap web ui： http://127.0.0.1:8775](http://127.0.0.1:8775)
|
||||
|
||||
#### 3.4. The web-based task management interface will be displayed in your browser. From there, you can manage and monitor your SQLMap tasks conveniently.
|
||||
|
||||
|
||||
> Please note that the SQLMap API server needs to be running in order to access the web-based management interface.
|
||||
> Make sure to keep the server running while using the interface.
|
||||
|
||||
|
||||
### 4. The Burp Suite client plugin.]
|
||||
#### 4.1. download the plugin from github repository: [mySqlmapClient](https://github.com/GitHubNull/mySqlmapClient)
|
||||
#### 4.2. install the plugin in Burp Suite:
|
||||
|
||||
#### 4.3. configure the plugin:
|
||||
##### 4.3.1. open the plugin configuration page:
|
||||
|
||||
##### 4.3.2. enter the SQLMap API server address(or left default) and
|
||||
##### 4.3.3. enter the SQLMap API server port(or left default)
|
||||
##### 4.3.4. enter the SQLMap API tmp request file dir(or left default)
|
||||
##### 4.3.5. click connect button to connect to mySqlmap api service
|
||||
##### 4.3.6. click save button to save the configuration
|
||||
|
||||
|
||||
|
||||
#### 4.4. use plugin:
|
||||
|
||||
|
||||
|
||||
Sub repository
|
||||
----
|
||||
* [mySqlmapClient](https://github.com/GitHubNull/mySqlmapClient)
|
||||
* [mySqlmapWebTaskManager](https://github.com/GitHubNull/mySqlmapWebTaskManager)
|
||||
|
||||
|
||||
## Contributing
|
||||
|
||||
You can visit the [collection of screenshots](https://github.com/sqlmapproject/sqlmap/wiki/Screenshots) demonstrating some of the features on the wiki.
|
||||
We welcome contributions from the community to enhance the functionality and usability of mySqlmap. If you would like to contribute, please follow these guidelines:
|
||||
|
||||
Installation
|
||||
----
|
||||
1. Fork the repository and create a new branch for your feature or bug fix.
|
||||
|
||||
You can download the latest tarball by clicking [here](https://github.com/sqlmapproject/sqlmap/tarball/master) or latest zipball by clicking [here](https://github.com/sqlmapproject/sqlmap/zipball/master).
|
||||
2. Ensure that your code adheres to the existing coding style and conventions.
|
||||
|
||||
Preferably, you can download sqlmap by cloning the [Git](https://github.com/sqlmapproject/sqlmap) repository:
|
||||
3. Test your changes thoroughly.
|
||||
|
||||
git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
|
||||
4. Submit a pull request, describing the purpose and changes introduced by your contribution.
|
||||
|
||||
sqlmap works out of the box with [Python](https://www.python.org/download/) version **2.6**, **2.7** and **3.x** on any platform.
|
||||
|
||||
Usage
|
||||
----
|
||||
|
||||
To get a list of basic options and switches use:
|
||||
|
||||
python sqlmap.py -h
|
||||
|
||||
To get a list of all options and switches use:
|
||||
|
||||
python sqlmap.py -hh
|
||||
|
||||
You can find a sample run [here](https://asciinema.org/a/46601).
|
||||
To get an overview of sqlmap capabilities, a list of supported features, and a description of all options and switches, along with examples, you are advised to consult the [user's manual](https://github.com/sqlmapproject/sqlmap/wiki/Usage).
|
||||
|
||||
Links
|
||||
----
|
||||
|
||||
* Homepage: https://sqlmap.org
|
||||
* Download: [.tar.gz](https://github.com/sqlmapproject/sqlmap/tarball/master) or [.zip](https://github.com/sqlmapproject/sqlmap/zipball/master)
|
||||
* Commits RSS feed: https://github.com/sqlmapproject/sqlmap/commits/master.atom
|
||||
* Issue tracker: https://github.com/sqlmapproject/sqlmap/issues
|
||||
* User's manual: https://github.com/sqlmapproject/sqlmap/wiki
|
||||
* Frequently Asked Questions (FAQ): https://github.com/sqlmapproject/sqlmap/wiki/FAQ
|
||||
* Twitter: [@sqlmap](https://twitter.com/sqlmap)
|
||||
* Demos: [https://www.youtube.com/user/inquisb/videos](https://www.youtube.com/user/inquisb/videos)
|
||||
* Screenshots: https://github.com/sqlmapproject/sqlmap/wiki/Screenshots
|
||||
|
||||
Translations
|
||||
----
|
||||
|
||||
* [Bulgarian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-bg-BG.md)
|
||||
* [Chinese](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-zh-CN.md)
|
||||
* [Croatian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-hr-HR.md)
|
||||
* [Dutch](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-nl-NL.md)
|
||||
* [French](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-fr-FR.md)
|
||||
* [Georgian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-ka-GE.md)
|
||||
* [German](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-de-DE.md)
|
||||
* [Greek](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-gr-GR.md)
|
||||
* [Hindi](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-in-HI.md)
|
||||
* [Indonesian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-id-ID.md)
|
||||
* [Italian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-it-IT.md)
|
||||
* [Japanese](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-ja-JP.md)
|
||||
* [Korean](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-ko-KR.md)
|
||||
* [Persian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-fa-IR.md)
|
||||
* [Polish](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-pl-PL.md)
|
||||
* [Portuguese](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-pt-BR.md)
|
||||
* [Russian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-ru-RU.md)
|
||||
* [Serbian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-rs-RS.md)
|
||||
* [Slovak](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-sk-SK.md)
|
||||
* [Spanish](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-es-MX.md)
|
||||
* [Turkish](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-tr-TR.md)
|
||||
* [Ukrainian](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-uk-UA.md)
|
||||
* [Vietnamese](https://github.com/sqlmapproject/sqlmap/blob/master/doc/translations/README-vi-VN.md)
|
||||
|
||||
## License
|
||||
|
||||
mySqlmap is released under the [license] license. Please review the [LICENSE](/LICENSE) file for more details.
|
||||
|
||||
## Disclaimer
|
||||
|
||||
mySqlmap is a tool designed for legitimate security testing purposes. However, it is essential to obtain proper authorization before scanning any system or application. The authors of mySqlmap are not responsible for any misuse or illegal activities conducted with this tool.
|
||||
|
||||
## Contact
|
||||
|
||||
If you have any questions, suggestions, or feedback, please contact [github address].
|
||||
|
||||
Thank you for using mySqlmap! We hope it helps you in your SQL injection testing endeavors.
|
||||
|
|
@ -1,49 +1,97 @@
|
|||
# sqlmap 
|
||||
# mySqlmap - 基于sqlmap包含Web任务管理界面的SQL注入扫描器
|
||||
|
||||
[](https://github.com/sqlmapproject/sqlmap/actions/workflows/tests.yml) [](https://www.python.org/) [](https://raw.githubusercontent.com/sqlmapproject/sqlmap/master/LICENSE) [](https://twitter.com/sqlmap)
|
||||
mySqlmap是sqlmap的一个分支和修改版本，它是一个备受欢迎的SQL注入扫描器。本分支旨在通过添加基于Web的任务管理功能来增强sqlmap的功能，让您可以更轻松地管理和执行SQL注入扫描任务。mySqlmap提供了直观且功能强大的Web界面，使您能够轻松控制扫描任务的各个方面，为您的安全测试工作提供便利和效率。
|
||||
|
||||
sqlmap 是一个开源的渗透测试工具，可以用来自动化的检测，利用SQL注入漏洞，获取数据库服务器的权限。它具有功能强大的检测引擎,针对各种不同类型数据库的渗透测试的功能选项，包括获取数据库中存储的数据，访问操作系统文件甚至可以通过带外数据连接的方式执行操作系统命令。
|
||||
## 特点
|
||||
|
||||
演示截图
|
||||
- **Web界面的任务管理**：通过用户友好的Web界面，您可以直观地管理和监控SQL注入扫描任务。启动、暂停、终止和删除任务只需轻点几下，操作简单明了。
|
||||
- **详细的任务日志**：每个扫描任务都有详细的日志记录，方便您进行故障排除和分析。您可以深入了解扫描的进展和结果，快速定位问题并采取相应措施。
|
||||
- **注入点智能标记**：mySqlmap能够清晰标记被扫描应用程序中的注入点，使您能够快速定位潜在的安全风险。不再花费大量时间来手动分析和确认注入点的位置。
|
||||
- **载荷详情一目了然**：查看每个注入点的载荷详情，帮助您更好地理解和分析注入漏洞。mySqlmap提供方便的界面，让您清楚了解每个注入点的攻击载荷，更高效地开展后续工作。
|
||||
|
||||
除了强大的Web界面，我们还为您提供了基于Java的Burp Suite客户端插件，进一步简化了扫描任务的提交流程。该插件与Burp Suite完美集成，让您能够直接从Burp Suite应用程序内部提交扫描任务，提高工作效率。
|
||||
|
||||
## 安装
|
||||
|
||||
开始使用mySqlmap，请按照以下步骤进行操作：
|
||||
|
||||
### 1. 从GitHub上克隆mySqlmay存储库：
|
||||
|
||||
```shell
|
||||
git clone https://github.com/GitHubNull/mysqlmap.git
|
||||
```
|
||||
|
||||
### 2. 确保已安装Python [3.7+]。
|
||||
|
||||
### 3. 运行和配置
|
||||
#### 3.1. 打开命令提示符或终端并导航到项目的根目录。
|
||||
#### 3.2. 执行以下命令启动mySqlmap api服务：
|
||||
```shell
|
||||
python sqlmapapi.py -s
|
||||
```
|
||||
|
||||
|
||||
#### 3.3. 启动服务器运行之后，打开一个Web浏览器（推荐使用Google Chrome）并输入以下URL：[mySqlmap web ui： http://127.0.0.1:8775](http://127.0.0.1:8775)
|
||||
#### 3.4. web页面任务管理界面将在浏览器中显示。您可以方便地管理和监视您的sqlmap扫描任务。
|
||||
|
||||
> 请注意，为了访问基于Web的管理界面，SQLMap API服务器需要运行。
|
||||
> 在使用界面时，请确保服务器始终保持运行。
|
||||
|
||||
### 4. Burp Suite客户端插件
|
||||
#### 4.1. 从GitHub存储库下载插件：[mySqlmapClient: https://github.com/GitHubNull/mySqlmapClient](https://github.com/GitHubNull/mySqlmapClient)
|
||||
#### 4.2. 在Burp Suite中安装插件：
|
||||
|
||||
|
||||
#### 4.3. 配置插件
|
||||
|
||||
##### 4.3.1. 打开插件配置页面：
|
||||
|
||||
|
||||
##### 4.3.2. 输入SQLMap API服务器地址（或保持默认值）
|
||||
|
||||
##### 4.3.3. 输入SQLMap API服务器端口（或保持默认值）
|
||||
|
||||
#### 4.3.4. 输入SQLMap API临时请求文件目录（或保持默认值）
|
||||
|
||||
#### 4.3.5. 单击连接按钮以连接mySqlmap api 服务
|
||||
|
||||
#### 4.3.6. 单击保存按钮保存配置
|
||||
|
||||
|
||||
|
||||
#### 4.4. 使用插件
|
||||
|
||||
|
||||
|
||||
子项目
|
||||
----
|
||||
* [mySqlmapClient](https://github.com/GitHubNull/mySqlmapClient)
|
||||
* [mySqlmapWebTaskManager](https://github.com/GitHubNull/mySqlmapWebTaskManager)
|
||||
|
||||
|
||||
## 贡献
|
||||
|
||||
你可以访问 wiki上的 [截图](https://github.com/sqlmapproject/sqlmap/wiki/Screenshots) 查看各种用法的演示
|
||||
我们欢迎社区成员为mySqlmap贡献代码，改进项目的功能和易用性。如果您想贡献代码，请遵循以下准则：
|
||||
|
||||
安装方法
|
||||
----
|
||||
1. Fork存储库并为您的功能或错误修复创建一个新的分支。
|
||||
|
||||
你可以点击 [这里](https://github.com/sqlmapproject/sqlmap/tarball/master) 下载最新的 `tar` 打包的源代码 或者点击 [这里](https://github.com/sqlmapproject/sqlmap/zipball/master)下载最新的 `zip` 打包的源代码.
|
||||
2. 确保您的代码符合现有的编码风格和约定。
|
||||
|
||||
推荐你从 [Git](https://github.com/sqlmapproject/sqlmap) 仓库获取最新的源代码:
|
||||
3. 充分测试您的更改，确保其质量和稳定性。
|
||||
|
||||
git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
|
||||
4. 提交一个拉取请求，清晰地描述您的贡献目的和引入的更改。
|
||||
|
||||
sqlmap 可以运行在 [Python](https://www.python.org/download/) **2.6**, **2.7** 和 **3.x** 版本的任何平台上
|
||||
我们热切期待您的贡献，共同推动mySqlmap的发展和改进！
|
||||
|
||||
使用方法
|
||||
----
|
||||
## 许可证
|
||||
|
||||
通过如下命令可以查看基本的用法及命令行参数:
|
||||
mySqlmap基于[许可证]许可发布。请查阅[LICENSE](/LICENSE)文件以了解更多详情。
|
||||
|
||||
python sqlmap.py -h
|
||||
## 免责声明
|
||||
|
||||
通过如下的命令可以查看所有的用法及命令行参数:
|
||||
mySqlmap是一个旨在进行合法安全测试的工具。在扫描任何系统或应用程序之前，请确保获得适当的授权。mySqlmap的作者不对使用该工具进行任何滥用或非法活动承担责任。
|
||||
|
||||
python sqlmap.py -hh
|
||||
## 联系方式
|
||||
|
||||
你可以从 [这里](https://asciinema.org/a/46601) 看到一个sqlmap 的使用样例。除此以外，你还可以查看 [使用手册](https://github.com/sqlmapproject/sqlmap/wiki/Usage)。获取sqlmap所有支持的特性、参数、命令行选项开关及说明的使用帮助。
|
||||
如果您有任何问题、建议或反馈，请通过[github]与我们联系。
|
||||
|
||||
链接
|
||||
----
|
||||
|
||||
* 项目主页: https://sqlmap.org
|
||||
* 源代码下载: [.tar.gz](https://github.com/sqlmapproject/sqlmap/tarball/master) or [.zip](https://github.com/sqlmapproject/sqlmap/zipball/master)
|
||||
* RSS 订阅: https://github.com/sqlmapproject/sqlmap/commits/master.atom
|
||||
* Issue tracker: https://github.com/sqlmapproject/sqlmap/issues
|
||||
* 使用手册: https://github.com/sqlmapproject/sqlmap/wiki
|
||||
* 常见问题 (FAQ): https://github.com/sqlmapproject/sqlmap/wiki/FAQ
|
||||
* Twitter: [@sqlmap](https://twitter.com/sqlmap)
|
||||
* 教程: [https://www.youtube.com/user/inquisb/videos](https://www.youtube.com/user/inquisb/videos)
|
||||
* 截图: https://github.com/sqlmapproject/sqlmap/wiki/Screenshots
|
||||
感谢您选择mySqlmap！我们希望它能够成为您进行SQL注入测试的得力助手，为您的安全工作注入更多便利和效率。期待与您一起改进和完善mySqlmap！
|
||||
BIN
images/mySqlmap-command-line.png
Normal file
BIN
images/mySqlmap-command-line.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 102 KiB |
BIN
images/mySqlmap-web-ui.png
Normal file
BIN
images/mySqlmap-web-ui.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 114 KiB |
BIN
images/mySqlmapClient-install.png
Normal file
BIN
images/mySqlmapClient-install.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 207 KiB |
BIN
images/mySqlmapClient-setting-ui-after-connected.png
Normal file
BIN
images/mySqlmapClient-setting-ui-after-connected.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 97 KiB |
BIN
images/mySqlmapClient-setting-ui.png
Normal file
BIN
images/mySqlmapClient-setting-ui.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 105 KiB |
BIN
images/mySqlmapClient-shotcut.png
Normal file
BIN
images/mySqlmapClient-shotcut.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 373 KiB |
1
lib/utils/api/dist/assets/index-tEpnpi0Y.css
vendored
Normal file
1
lib/utils/api/dist/assets/index-tEpnpi0Y.css
vendored
Normal file
File diff suppressed because one or more lines are too long
484
lib/utils/api/dist/assets/index-tg4j6gyt.js
vendored
Normal file
484
lib/utils/api/dist/assets/index-tg4j6gyt.js
vendored
Normal file
File diff suppressed because one or more lines are too long
4
lib/utils/api/dist/index.html
vendored
4
lib/utils/api/dist/index.html
vendored
|
|
@ -5,8 +5,8 @@
|
|||
<link rel="icon" type="image/svg+xml" href="/vite.svg" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>sqlmap task manager</title>
|
||||
<script type="module" crossorigin src="/assets/index-ygWkV10N.js"></script>
|
||||
<link rel="stylesheet" crossorigin href="/assets/index-ptBIyXwj.css">
|
||||
<script type="module" crossorigin src="/assets/index-tg4j6gyt.js"></script>
|
||||
<link rel="stylesheet" crossorigin href="/assets/index-tEpnpi0Y.css">
|
||||
</head>
|
||||
<body>
|
||||
<div id="app"></div>
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user