sqlmap/index.php · 墨玉麒麟/SQLMAP-Web-GUI

代码拉取完成,页面将自动刷新

扫描微信二维码支付

取消

支付完成

richgiteeai

Watch

不关注关注所有动态仅关注版本发行动态关注但不提醒动态

1 Star 0 Fork 0

墨玉麒麟/SQLMAP-Web-GUI

代码 Issues 0 Pull Requests 0 Wiki 统计流水线

服务

加入 Gitee

与超过 1400万开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)

免费加入

已有帐号? 立即登录

文件

master

分支 (1)

管理

master

该仓库未声明开源许可证文件(LICENSE),使用请关注具体项目描述及其代码上游依赖。

项目仓库所选许可证以仓库主分支所使用许可证为准

克隆/下载

HTTPS SSH SVN SVN+SSH 下载ZIP

提示

下载代码请复制以下命令到终端执行

为确保你提交的代码身份被 Gitee 正确识别,请执行以下命令完成配置

git config --global user.name userName 
git config --global user.email userEmail

初次使用 SSH 协议进行代码克隆、推送等操作时,需按下述提示完成 SSH 配置

1 生成 RSA 密钥

2 获取 RSA 公钥内容,并配置到 SSH公钥中

在 Gitee 上使用 SVN,请访问使用指南

使用 HTTPS 协议时,命令行会出现如下账号密码验证步骤。基于安全考虑,Gitee 建议配置并使用私人令牌替代登录密码进行克隆、推送等操作

Username for 'https://gitee.com': userName

Password for 'https://userName@gitee.com': # 私人令牌

分支 1

标签 0

SQLMAP-Web-GUI

sqlmap

index.php

index.php 3.39 KB

<?php

/*
 SQLMAP - REST Client & Web Operator
 Coded by: Hood3dRob1n

Beta: http://uppit.com/ol1jc0jdrzpf/sqlmap_web_edition.zip

@session_start(); // Start a new Session, if not already created (tracking later?)
 @set_time_limit(0); // May run long at times, remove time limits on script execution time
 $sess = session_id(); // Current Session ID, use tbd...
 $salt = "!SQL!"; // Salt for form token hash generation
 $token = sha1(mt_rand(1, 1000000) . $salt); // Generate CSRF Token Hash
 $_SESSION['token'] = $token; // Set CSRF Token for Form Submit Verification

include_once("header.php"); // Bring in our Page Header Content
 ?>

<div class="jumbotron" id="jumbotron">
 <p style="font-size=18px; font-weight: bold;">
 Welcome to the SQLMAP Web GUI!
 </p>
 <p style="font-size=12px;">
 Use the tabs below to configure your scan settings,<br />
 Then simply click on the button at the bottom when done to launch a new scan!<br />
 </p>
 </div>

<form class="form-horizontal" role="form" id="myForm" action="/sqlmap/scans.php" method="POST" target="_blank">
 <input type="hidden" name="token" value="<?php echo $token; ?>">
 <div class="settings" id="settings">
 <div class="nav_wrap" id="nav_wrap">
 <ul class="nav nav-tabs nav-justified" role="tablist">
 <li class="active"><a href="#" onClick="tabFlipper(1);" style="font-size=14px; font-weight: bold;">Basic</a></li>
 <li><a href="#" onClick="tabFlipper(3);" style="font-size=14px; font-weight: bold;">Request</a></li>
 <li><a href="#" onClick="tabFlipper(2);" style="font-size=14px; font-weight: bold;">Injection & Technique</a></li>
 <li><a href="#" onClick="tabFlipper(6);" style="font-size=14px; font-weight: bold;">Detection</a></li>
 <li><a href="#" onClick="tabFlipper(4);" style="font-size=14px; font-weight: bold;">Enumeration</a></li>
 <li><a href="#" onClick="tabFlipper(5);" style="font-size=14px; font-weight: bold;">Access</a></li>
 </ul>
 </div>
 <br />

<?php
 include_once("footer.php"); // Bring in our Page Footer Content

/*
 End of File
 */
?>

一键复制编辑原始数据按行查看历史

Hood3dRob1n 提交于 2015年03月20日 12:01 +08:00 . First commit

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89

<?php

 /*
 SQLMAP - REST Client & Web Operator
 Coded by: Hood3dRob1n

 Beta: http://uppit.com/ol1jc0jdrzpf/sqlmap_web_edition.zip

 */

 @session_start(); // Start a new Session, if not already created (tracking later?)
 @set_time_limit(0); // May run long at times, remove time limits on script execution time
 $sess = session_id(); // Current Session ID, use tbd...
 $salt = "!SQL!"; // Salt for form token hash generation
 $token = sha1(mt_rand(1, 1000000) . $salt); // Generate CSRF Token Hash
 $_SESSION['token'] = $token; // Set CSRF Token for Form Submit Verification

 include_once("header.php"); // Bring in our Page Header Content
 ?>


 <div class="container">

 <div class="jumbotron" id="jumbotron">
 <p style="font-size=18px; font-weight: bold;">
 Welcome to the SQLMAP Web GUI!
 </p>
 <p style="font-size=12px;">
 Use the tabs below to configure your scan settings,<br />
 Then simply click on the button at the bottom when done to launch a new scan!<br />
 </p>
 </div>

 <form class="form-horizontal" role="form" id="myForm" action="/sqlmap/scans.php" method="POST" target="_blank">
 <input type="hidden" name="token" value="<?php echo $token; ?>">
 <div class="settings" id="settings">
 <div class="nav_wrap" id="nav_wrap">
 <ul class="nav nav-tabs nav-justified" role="tablist">
 <li class="active"><a href="#" onClick="tabFlipper(1);" style="font-size=14px; font-weight: bold;">Basic</a></li>
 <li><a href="#" onClick="tabFlipper(3);" style="font-size=14px; font-weight: bold;">Request</a></li>
 <li><a href="#" onClick="tabFlipper(2);" style="font-size=14px; font-weight: bold;">Injection & Technique</a></li>
 <li><a href="#" onClick="tabFlipper(6);" style="font-size=14px; font-weight: bold;">Detection</a></li>
 <li><a href="#" onClick="tabFlipper(4);" style="font-size=14px; font-weight: bold;">Enumeration</a></li>
 <li><a href="#" onClick="tabFlipper(5);" style="font-size=14px; font-weight: bold;">Access</a></li>
 </ul>
 </div>
 <br />

 <div class="settings_basics_container" id="settings_basics_container">
 <?php include("basics.php"); ?>
 </div>

 <div class="settings_request_container" id="settings_request_container">
 <?php include("request.php"); ?>
 </div>

 <div class="settings_idt_container" id="settings_idt_container">
 <?php include("idt.php"); ?>
 </div>

 <div class="settings_idt2_container" id="settings_idt2_container">
 <?php include("idt2.php"); ?>
 </div>

 <div class="settings_enum_container" id="settings_enum_container">
 <?php include("enum.php"); ?>
 </div>

 <div class="settings_access_container" id="settings_access_container">
 <?php include("access.php"); ?>
 </div>
 </div>

 <br /><br />
 <input type="submit" class="btn" name="submit" value="Run SQLMAP Web Scan"/>
 <br /><br />
 </form>
 </div>


 <?php
 include_once("footer.php"); // Bring in our Page Footer Content


 /*
 End of File
 */
?>