python sqlmap.py -u "http://172.16.120.130/sqlmap/mysql/get_int.php?id=1" --batch
First of all, I would like to ask the seniors, what do -u and --batch here mean?
Secondly, I would like to ask, which piece of knowledge does this belong to? Does it belong to the linux command line, the cmd command line, or something else? Where can I go to learn the relevant commands, or there are relevant documents that can be consulted.
Waiting online for answers from the master~
phpcn_u15822017-05-18 11:03:07
-u URL, --url=URL Target URL (e.g. "http://www.site.com/vuln.php?id=1")
--batch Never ask for user input, use the default behaviour
The sqlmap document is very clear
https://github.com/sqlmapproj...
过去多啦不再A梦2017-05-18 11:03:07
sqlmap.py -u "http://172.16.120.130/sqlmap/mysql/get_int.php?id=1" --batch
是python的参数。-u "http://172.16.120.130/sqlmap/mysql/get_int.php?id=1" --batch
These parameters are parameters of sqlmap.py.
sqlmap.py should have -h or --help to view help information.
As for "whether it belongs to the linux command line or the cmd command line", I can't tell. I have to ask you, did you execute it on the linux shell or did you execute it in windows cmd or powershell?
淡淡烟草味2017-05-18 11:03:07
-u
和--batch
should belong to the command line parameters. Command line parameters are parameters provided to the execution of a script or executable program.
Parameters are available in two ways: default and customized. Generally there are two modes:
单短线+空格+参数值
,例如 -u "http://172.16.120.130/sqlmap/mysql/get_int.php?id=1"
另外一种就是 双短线+等号+参数值
。例如 --batch=somevalue
You can pass the sys.args
读取这些参数,也可以使用更强大的argparse
module in python code, and you can also use a useful third-party library click
淡淡烟草味2017-05-18 11:03:07
The key is to look at sqlmap.py. -u is the parameter passed when executing this script.
There should be sys.argv[1:] in this script to obtain these parameters. Take a look