Kali：sqlmap :[10:39:37] [CRITICAL] unable to connect to the target URL

最新推荐文章于 2025-02-23 23:30:19 发布
原创 最新推荐文章于 2025-02-23 23:30:19 发布 · 4.9k 阅读 · 3 ·
CC 4.0 BY-SA版权
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
文章标签：

#sqlmap #kali #owasp #安全性测试 #SQL注入

在Kali Linux中尝试使用sqlmap工具访问OWASP靶机上的user-info.php页面进行SQL注入测试时，遇到了无法连接目标URL的问题。尝试了网上建议的增加代理设置，如`--proxy=http://192.168.1.1`，但问题依旧。命令行参数包括`--batch`、`--level=5`和`--risk=3`，但连接失败。这可能涉及到网络配置、靶机状态或者sqlmap的使用方法等多方面因素。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

1、kali中使用sqlamp 访问靶机OWAS中页面进行SQL注入提示：unable to connect to the target URL

2、看了网上的都是扯淡增加代理访问
sqlmap -u "http://192.168.111.132/mutillidae/index.php?page=user-info.php&username=zhuzhu&password=123456&user-info-php-submit-button=View+Account+Details" --batch -p username --proxy=http://192.168.1.1 --level=5 --rick=3

Sqlmap使用详解
谢公子的博客
12-01 2万+
目录 Sqlmap Sqlmap的简单用法 探测指定URL是否存在SQL注入漏洞 查看数据库的所有用户 查看数据库所有用户名的密码 查看数据库当前用户 判断当前用户是否有管理权限 列出数据库管理员角色 查看所有的数据库 查看当前的数据库 爆出指定数据库中的所有的表 爆出指定数据库指定表中的所有的列 爆出指定数据库指定表指定列下的数据 爆出该网站数据库中的所有数据 ...
sqlmap无法连接目标的url
fsrmsqc的博客
11-11 3778
在学习sqlmap时遇到了无法连接目标的url的问题：unable to connect to the target URL. sqlmap is going to retry the request(s)
解决sqlmap报错：[CRITICAL] unable to connect to the target URL. sqlmap is going to retry the request(s)
热门推荐
茶花语的博客
03-11 2万+
解决sqlmap报错：[CRITICAL] unable to connect to the target URL. sqlmap is going to retry the request(s)
Kali 的sqlmap：Connection timed out to the target URL. unable to connect to the target URL
2201_75437983的博客
08-08 1161
（1）如果python sqlmap.py运行不起来就试试直接sqlmap （2）把网站的引号删除试试看 （3）在网站末尾10800/后面要加一个空格再写--cookie （4）代码在运行的途中遇到选择(Y/N) 你就一直选Y然后回车就可以了
sqlmap报错[CRITICAL] unable to connect to the target URL. sqlmap is going to retry the request(s)
weixin_49671316的博客
11-17 4268
如图，用读文件的方式跑sqlmap时，明明站点是通的，却提示不可达，后来发现目标站点是HTTPS的，sqlmap默认是用http协议。添加代理，让sqlmap走burp的代理，添加ssl。
sqlmap为什么显示[CRITICAL] unable to connect to the target URL. sqlmap is going to retry the request(s)
安久哲的博客
04-26 6791
这种情况下，应该删除kali里面的sqlmap，重新下载一个sqlmap 进入kali的root权限，sudo su cd /usr/share rm -rf sqlmap/ git clone https://github.com/sqlmapproject/sqlmap 下载完成就可以用了
2019-2-17 dvwa学习-环境搭建和sql字符型注入（级别low）
weixin_42555985的博客
02-17 7548
因为要学习sqlmap，所以需要搭一个测试环境。 查了网上http://www.360doc.com/content/13/0614/22/11029609_292922372.shtml，打算搞个dvwa环境。 DVWA全称是Damn Vulnerable Web Application，它是用PHP+Mysql编写的一套用于常规WEB漏洞教学和检测的WEB脆弱性测试程序。包含了SQL注入、XS...
windows sqlmap unable to connect to the target URL. sqlmap is going to retry the request(s)
最新发布
初心魏的博客
02-23 421
把windows的代理关了，bp的代理，firefox的代理，谷歌的代理，统统关掉。
sqlmap无法连接到目标url解决方法
m0_54108779的博客
05-19 4790
sqlmap无法连接到目标url解决方法 1.先进ROOT用户，不然你没办法删除 sqlmap 2.删除SQLMAP 3.安装SQLMAP git clone https://github.com/sqlmapproject/sqlmap
Invalid Target URL(解决方案).md
09-02
Invalid Target URL(解决方案).md
sql注入扫描_sqlmap-1.1.3.zip
02-13
sqlmap也是渗透中常用的一个注入工具，其实在注入工具方面，一个sqlmap就足够用了。现在支持python3了
sqlmap注入
10-26
sqlmap注入的工具，正版有效，win10免杀，需要的环境是python3，是python3，看好了。别弄错了。
sqlmap出现无法找到目标url
weixin_46041615的博客
07-27 7111
刚使用slqmap出现无法连接目标URl解决方式 刚接触sqlmap，第一次使用出现unable to connect to the target URL，找了好多种方式都不是很靠谱，最后把sqlmap卸了重装一遍就好了，方式如下： 1.使用管理员身份：su - root（需要输入你的密码） 2.进入share文件夹：cd /usr/share 3.卸载sqlmap：rm -rf sqlmap/ 4.在官网地址重新下载sqlmap：git clone https://github.com/sqlmappr
Sqlmap 渗透注入总是显示无法连接目标网络问题分析与解决
Specif1c的博客
08-04 1万+
问题如下： [CRITICAL] connection reset to the target URL. sqlmap is going to retry the request(s) 分析与解决： 1、在 sqlmap 安装目录下（/usr/share/sqlmap/）启动 sqlmap。 2、看注入的目标地址是不是 https 协议，如果是可以使用sqlmap直接加上–force-ssl参数，告诉sqlmap这是https服务。或者可以在Host头后面加上:443（默认不是443）。 3、ip
SQLmap出现无法连接的问题解决
2302_81027474的博客
04-11 3423
[CRITICAL] unable to connect to the target URL. sqlmap is going to retry the request(s) [16:16:06] [WARNING] if the problem persists please check that the provided target URL is reachable. In case that it is, you can try to rerun with switch '--random-agen
关于kali连不上网络
q759451733的博客
07-21 2559
1、IP地址是127.0.0.1，很明显是不可能连的上网的。 2、单击 VMware最上方的 编辑---虚拟网络编辑器。出现如下图！ 3、网关IP地址是192.168.179.2，使用gedit /etc/resolv.conf 命令，将nameserver 192.168.179.2添加进去。 4、gedit /etc/network/interfaces 将aoto e...
kali报错Unable to connect to remote host: No route to host，如何解决？？
**My Coding Family**
04-05 1704
ok，以上就是我这期的Bug修复内容啦，如果还想查找更多解决方案，你可以看看我专门收集Bug及提供解决方案的专栏「Bug调优」，都是实战中碰到的Bug，希望对你有所帮助。到此，咱们下期拜拜。码字不易，如果这篇文章对你有所帮助，帮忙给bugj菌来个，您的支持就是我坚持写作分享知识点传播技术的最大动力。「猿圈奇妙屋」；
BUU LFI COURSE 1 1
01-25
### BUU LFI Course Materials and Resources #### Overview of the Local File Inclusion (LFI) Vulnerability Local File Inclusion vulnerabilities occur when a web application allows user input to specify which files should be included dynamically within the server-side script, such as PHP's `include` or `require`. If not properly sanitized, this can lead to unauthorized access to sensitive system files or even remote code execution. In the context of BUU LFI courses, participants are introduced to various techniques for exploiting these types of vulnerabilities through practical exercises. The primary focus is on understanding how improper handling of file paths leads to security risks[^1]. #### Practical Example from BUU LFI Courses One specific example involves an exercise where users must exploit a vulnerable parameter named 'file'. By manipulating URL parameters like so: ``` http://example.com/index.php?file=../../../../etc/passwd ``` Participants learn that traversing directories using sequences of '../' enables them to reach higher-level folders until reaching critical areas containing flags or other important data points[^2]. For instance, accessing the flag might involve navigating back several levels relative to the current working directory by specifying multiple parent-directory references (`../../..`) before pointing towards the target resource ('flag'). ```bash http://target-url/?file=../../../flag ``` This demonstrates both theoretical knowledge about path traversal attacks alongside hands-on experience with real-world exploitation scenarios provided during training sessions at platforms similar to those described above[^5]. #### Detecting Server Environment Through Error Messages Another aspect covered includes methods for identifying whether the underlying operating system running behind-the-scenes is Windows or Linux based solely upon error messages returned after attempting invalid inputs via query strings attached directly onto URLs[^4]: - **Windows**: Typically shows errors related to missing semicolons (;), colons (:), etc., often associated with incorrect syntax used while trying to reference local filesystem objects. - **Linux/Unix-like Systems**: May display permission denied issues due to restricted permissions set against certain protected locations outside public_html directories unless explicitly allowed otherwise. Understanding differences between OS-specific behaviors helps refine attack vectors tailored specifically toward bypassing defenses present under different environments encountered throughout challenges posed within CTF competitions hosted online. --related questions-- 1. How does one differentiate between absolute vs relative paths in crafting payloads targeting LFI flaws? 2. What measures can developers take to prevent LFI vulnerabilities effectively? 3. Can you explain why it’s crucial to sanitize all forms of external input thoroughly prior to processing inside scripts responsible for including external resources? 4. Are there any tools recommended for automating detection and exploitation processes concerning LFI weaknesses found across diverse applications built over varying technologies stacks? 5. Describe common pitfalls beginners face learning about LFI exploits and suggest ways they could improve their skills progressively without compromising personal systems unintentionally.
评论 4
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值