kali弱点分析工具之BBQSQL

最新推荐文章于 2024-04-13 09:56:10 发布

王孙小蛮

最新推荐文章于 2024-04-13 09:56:10 发布

阅读量1.9k

点赞数

CC 4.0 BY-SA版权

分类专栏： Kali

本文链接：https://blog.youkuaiyun.com/u010370142/article/details/51914131

Kali 专栏收录该内容

19 篇文章

订阅专栏

BBQSQL是一款用Python编写的盲SQL注入框架，适用于难以利用的SQL注入漏洞。该工具具备高度定制化能力，支持多种数据库，并通过直观的用户界面简化攻击设置过程。借助Python的gevent库，BBQSQL能实现高速操作。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don’t you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues.

BBQSQL is a blind SQL injection framework written in Python. It is extremely useful when attacking tricky SQL injection vulnerabilities. BBQSQL is also a semi-automatic tool, allowing quite a bit of customization for those hard to trigger SQL injection findings. The tool is built to be database agnostic and is extremely versatile. It also has an intuitive UI to make setting up attacks much easier. Python gevent is also implemented, making BBQSQL extremely fast.

Similar to other SQL injection tools you provide certain request information.

一款半自动化的SQL 注入工具，归属于WEB攻击工具库数据库攻击工具SQL注入

root@kali:~# bbqsql
_ _ _ _ _ _
| \ | \ / \ / \ / \ | \
|

$ ∥

$$\|$

| $|$

__/ $__/$

| $|$

__/ $__/$

| $|$

___\$ $___\$$ |

|

$|$ |

|

$|$

|

$|$

|

$|$ |

$ $ |

$\$$ \ |$ |

|

$|$
|

$ ∥

$$\|$

∥ $\|$

| $_|$

$ $_\$$

|

$_|$ |

|

$|$ / $|$ $|$ /

|

$|$ / \

|_|

$| \__|$ |

/

$/ \$ |

_____|

$_____ |$

|

$|$

$ $

$\$$$

$ $

$\$$$ $

| $|$

$ $\ \$$

$ $\$$

\ $

$ $\$$

\ $

$ $

$\$ $$$

               _.(-)._
            .'         '.
           / 'or '1'='1  \
           |'-...___...-'|
            \    '='    /
             `'._____.'` 
              /   |   \
             /.--'|'--.\
          []/'-.__|__.-'\[]
                  |
                 [] 

BBQSQL injection toolkit (bbqsql)         
Lead Development: Ben Toews(mastahyeti)         
Development: Scott Behrens(arbit)         
Menu modified from code for Social Engineering Toolkit (SET) by: David Kennedy (ReL1K)    
SET is located at: http://www.secmaniac.com(SET)    
Version: 1.0               

The 5 S's of BBQ: 
Sauce, Spice, Smoke, Sizzle, and SQLi

Select from the menu:

1) Setup HTTP Parameters
2) Setup BBQSQL Options
3) Export Config
4) Import Config
5) Run Exploit
6) Help, Credits, and About

99) Exit the bbqsql injection toolkit

bbqsql>