Sqlmap自动切换代理
2019-11-07 00:05:56 Author: mp.weixin.qq.com(查看原文) 阅读量:25 收藏

大家经常可能遇到,用sqlmap跑某些注入的时候,因为网络、waf等问题造成被拦截、跑失败等情况。

因此下面这个脚本可以做到sqlmap自动切换代理,防止被ban。

使用教程如下

1、在ips.txt中存入可用的代理,格式如下

1.1.1.1:1080

2.2.2.2:9988

3.3.3.3:1100

2、运行脚本

python sqlmap_auto_proxy.py

3、sqlmap设置代理

sqlmap -u "http://www.chinabaiker.com/index.php?id=inject" --proxy=http://127.0.0.1:50007

即可在跑注入时,自动切换代理。

部分代码如下

def tcp_mapping_request(local_conn, remote_ip, remote_port):        while True:        remote_conn = socket.socket(socket.AF_INET, socket.SOCK_STREAM)        try:            remote_conn.settimeout(3)            remote_conn.connect((remote_ip, remote_port))        except Exception:            logger.error('Unable to connect to the remote server.')            continue        threading.Thread(target=tcp_mapping_worker, args=(local_conn, remote_conn)).start()        threading.Thread(target=tcp_mapping_worker, args=(remote_conn, local_conn)).start()        return

def tcp_mapping_worker(conn_receiver, conn_sender): while True: try: data = conn_receiver.recv(PKT_BUFF_SIZE) except Exception: logger.debug('Connection closed.') break if not data: logger.info('No more data is received.') break try: conn_sender.sendall(data) except Exception: logger.error('Failed sending data.') break

脚本地址:

https://github.com/Jumbo-WJB/sqlmap_auto_proxy

凑字数凑字数凑字数凑字数凑字数凑字数凑字数凑字数


文章来源: http://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709352739&idx=1&sn=29aae8a35d5ac914252cf1631c05b17a&chksm=bb40c5968c374c804b7997fadddbaff1c61596e6d6260fd0406ef093b1bf19b44f433961f39b&mpshare=1&scene=24&srcid=&sharer_sharetime=1573056355749&sharer_shareid=5191b3dcb328f693d5261ba6bca8d267#rd
如有侵权请联系:admin#unsafe.sh