5.24.2.sqlmap自动注入
第一个：登录页面
（1）pb抓取http头
POST /sqli-labs/Less-24/login.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/
Cookie: PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, i
login_user=admin&login_password=123456&mysubmit=Login（2）sql.txt填入http头
vi sql.txt 
（3）跑当前数据库
sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db
没跑出
第二个：注册页面
（1）pb抓取http头
POST /sqli-labs/Less-24/login_create.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 71
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/new_user.php
Cookie: PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, i
username=13819123456&password=123456&re_password=123456&submit=Register（2）sql.txt填入http头
vi sql.txt 
（3）跑当前数据库
sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db
没跑出
第三个：修改密码页面
（1）pb抓取http头
POST /sqli-labs/Less-24/pass_change.php HTTP/1.1
Host: 192.168.10.106
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
Origin: http://192.168.10.106
Connection: keep-alive
Referer: http://192.168.10.106/sqli-labs/Less-24/logged-in.php
Cookie: Auth=1; PHPSESSID=gubl3g41j1400v89r2se01dc50
Upgrade-Insecure-Requests: 1
Priority: u=0, i
current_password=123456&password=12345678&re_password=12345678&submit=Reset（2）sql.txt填入http头
vi sql.txt 
（3）跑当前数据库
sqlmap -r sql.txt --level 5 --risk 3 --thread="10" --batch --current-db
跑不出
三个页面都跑了很久，都没跑出...