WEB攻防平台 - 模拟实战：SQL 注入攻击演练环境
<nav class='cd-side-navigation'>
<ul>
<li>
<a href='#' class='selected'>
<svg class='nc-icon outline' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' width='24px' height='24px' viewBox='0 0 24 24'><g transform='translate(0, 0)'> <polygon fill='none' stroke='#fff' stroke-width='2' stroke-linecap='square' stroke-miterlimit='10' points='12,2 3,10 3,23 9,23 9,16 15,16 15,23 21,23 21,10 ' stroke-linejoin='miter'></polygon> </g></svg>
WEB攻防平台
</a>
</li>
</ul>
</nav>
<div class='container'>
<section class='section-wrap'>
<div class='section section-1'>
<div class='cd-title'>
<h2>WEB攻防平台</h2>
<span>平台演练环境均内部使用</span>
</div>
</div>
<div class='section section-2'>
<div class='title'>
<p class='tit'>注入系列</p>
<div class='section-1-1'>
<span>相关概念</span>
<p>随着B/S模式应用开发的发展，使用该模式编写程序的程序员越来越多，但是由于程序员的水平参差不齐，相当大一部分应用程序存在安全隐患。用户可以提交一段数据库查询代码，根据程序返回的结果，获得某些他想要知的数据，这个就是所谓的SQLinjection，即sql注入式攻击。</p>
<span>目的</span>
<p>培训人员在通过以上各种主流、非主流、非常规环境中能深刻理解SQL注入原理，实战中有很大的作用，现在互联网每个站点大多数都有注入，只是隐藏的较深，更难发现和利用，本注入系列模拟了各种场景对培训人员能起到针对性作用。</p>
<div id='cen_right_top'>
<div class='cen_right_top'>
<a href='#' class='on'>模拟实战</a>
</div>
<div class='content'>
<ul style='display:block'>
<li><a href='http://192.168.1.5/' title='网站入口'>Asp+access手工注入</a></li>
<li><a href='http://192.168.1.6/' title='网站入口'>Asp+access报错手工注入</a></li>
<li><a href='http://192.168.1.5/' title='网站入口'>Asp+access自动化注入</a></li>
<li><a href='http://192.168.1.7/index.php?id=1' title='网站入口'>PHP+mysql手工注入</a></li>
<li><a href='http://192.168.1.7/index.php?id=1' title='网站入口'>PHP+mysql自动化注入</a></li>
<li><a href='http://192.168.1.8/forum.php' title='网站入口'>PHP+Mysql POST+二次注入</a></li>
<li><a href='http://192.168.1.9/' title='网站入口'>PHP+Mysql另类COOKIE注入</a></li>
<li><a href='http://192.168.1.10/index.php?id=1' title='网站入口'>php+MYsql利用宽字符突破防注入</a></li>
<li><a href='http://192.168.1.29:8081/student/login.jsp' title='网站入口'>tomcat+oracle+jsp+java手工注入</a></li>
<li><a href='http://192.168.1.12/sql/' title='网站入口'>X-Forwarded-For头注射</a></li>
<li><a href='http://192.168.1.13/xml/weixin.php' title='网站入口'>XML外部实体注入攻击</a></li>
<li><a href='http://192.168.1.11/74cms/admin/admin_login.php?act=login' title='网站入口'>PHP+Mysql POST+绕过后台</a></li>
<li><a href='http://192.168.1.15/index.php?id=1' title='网站入口'>过360主机卫士注入</a></li>
<li><a href='http://192.168.1.31/sql.aspx?id=1' title='网站入口'>护卫神</a></li>
<li><a href='http://192.168.1.14/index.php?id=1' title='网站入口'>过安全狗注入</a></li>
<li><a href='http://192.168.1.17/index.php?id=1' title='网站入口'>过云锁注入</a></li>
<li><a href='http://192.168.1.4/' title='网站入口'>webug</a></li>
<li><a href='http://192.168.1.18/sqlilabs/' title='网站入口'>sqli-lab综合注入</a></li>
<li><a href='http://192.168.1.18/control/more/tp5/public/index.php' title='网站入口'>ThinkPHP</a></li>
</ul>
</div>
</div>
</div>
</div>
</div>
</section>
</div>
<style>
body {
background-color: #1f1f1f;
color: #fff;
font-family: Arial, sans-serif;
font-size: 16px;
margin: 0;
padding: 0;
}
.container {
max-width: 800px;
margin: 0 auto;
padding: 40px 20px;
}
.cd-side-navigation {
position: fixed;
top: 0;
left: 0;
height: 100%;
background-color: #3f3f3f;
z-index: 9999;
overflow-y: auto;
-webkit-transition: all 0.3s;
transition: all 0.3s;
}
.cd-side-navigation ul {
padding: 0;
margin: 0;
list-style: none;
}
.cd-side-navigation li {
position: relative;
}
.cd-side-navigation li a {
display: block;
color: #fff;
font-size: 20px;
font-weight: bold;
padding: 20px;
text-decoration: none;
-webkit-transition: all 0.3s;
transition: all 0.3s;
}
.cd-side-navigation li a:hover {
background-color: #2ecc71;
color: #fff;
}
.cd-side-navigation li a.selected {
background-color: #2ecc71;
color: #fff;
}
.cd-side-navigation svg {
fill: none;
stroke: #fff;
stroke-width: 2;
stroke-linecap: square;
stroke-miterlimit: 10;
width: 24px;
height: 24px;
margin-right: 10px;
vertical-align: middle;
}
.section-wrap {
display: flex;
flex-wrap: wrap;
margin-top: 80px;
}
.section {
flex-basis: 100%;
padding: 40px;
background-color: #2ecc71;
color: #fff;
}
.section-1 {
background-image: url('https://cdn.pixabay.com/photo/2015/12/08/00/30/fantasy-1088145_960_720.jpg');
background-size: cover;
background-position: center;
text-align: center;
}
.cd-title {
margin-top: 100px;
margin-bottom: 0;
}
.cd-title h2 {
font-size: 48px;
margin-bottom: 20px;
}
.cd-title span {
font-size: 24px;
}
.section-2 {
background-color: #fff;
color: #2ecc71;
}
.title {
text-align: center;
margin-bottom: 40px;
}
.tit {
font-size: 36px;
font-weight: bold;
margin-bottom: 20px;
}
.section-1-1 {
font-size: 18px;
line-height: 1.5;
margin-bottom: 40px;
}
.section-1-1 span {
font-weight: bold;
display: block;
margin-bottom: 10px;
margin-top: 20px;
}
.content {
margin-top: 40px;
text-align: center;
}
.content ul {
padding: 0;
margin: 0;
list-style: none;
}
.content li {
display: inline-block;
margin-right: 10px;
}
.content li a {
display: inline-block;
padding: 10px;
background-color: #2ecc71;
color: #fff;
text-decoration: none;
border-radius: 5px;
-webkit-transition: all 0.3s;
transition: all 0.3s;
}
.content li a:hover {
background-color: #27ae60;
}
.on {
background-color: #fff;
color: #2ecc71;
border: 2px solid #2ecc71;
border-radius: 5px;
padding: 10px;
margin-right: 10px;
-webkit-transition: all 0.3s;
transition: all 0.3s;
}
.on:hover {
background-color: #2ecc71;
color: #fff;
border: 2px solid #fff;
}
</styl
原文地址: http://www.cveoy.top/t/topic/l45b 著作权归作者所有。请勿转载和采集!