From 69b595c060c422587168f826708da5e16dc34292 Mon Sep 17 00:00:00 2001 From: sowish <1546118682@qq.com> Date: Thu, 3 Dec 2015 15:41:06 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=E8=AF=B4=E6=98=8E?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/README b/README index 089142a..4c2a108 100644 --- a/README +++ b/README @@ -1,2 +1,9 @@ -hello,world! -This is a tool to detect sql injection by sqlmapapi using baidu search engine. +本程序利用百度爬取特定的url链接,然后调用sqlmapapi(sqlmap自带的批量接口),进行注入的判断。 +用法:先在自己sqlmap的目录下执行python sqlmapapi.py -s + 进行监听操作。然后执行AutoSqli.py + +这里要注意的是在代码里自定义搜索关键字: +key='inurl:asp?id=' +以及线程数: +nloops = range(4) #threads Num +建议线程数不要太多,以免卡死。