火狐+burp suite暴力破解2
本文共 449 字，大约阅读时间需要 1 分钟。
火狐+burp suite暴力破解
Low级别
1.登录http://localhost/dvwa/setup.php 并将DVWA Security 设置成low级别
2.在账户栏下输入：admin’1 or ‘1’='1 3.登陆成功！
Medium级别
1.将 DVWA Security 设置成medium级别
2.在火狐设置好代理，打开 burp suite 3.输入账户和密码*(错误的：123)
4.点击“Action”——“send to intruder” 5.在“intuder”的"Positions"里将密码设置成变量 
6.在“intruder”的“Payloads”里输入可能的密码*（也可以将密码存入文本文档里—稍后。。。）并点击“Start attack”
7.找到长度不一样的“password”很有可能是正确密码 
补：使用密码本
1.在intruder——Payloads type下选择"Runtime file"
2.点击：Start attack 成功！！！ 
转载地址：http://wvjrz.baihongyu.com/
你可能感兴趣的文章
NN&DL4.8 What does this have to do with the brain?
查看>>
nnU-Net 终极指南
查看>>
No 'Access-Control-Allow-Origin' header is present on the requested resource.
查看>>
No 'Access-Control-Allow-Origin' header is present on the requested resource.
查看>>
NO 157 去掉禅道访问地址中的zentao
查看>>
no available service ‘default‘ found, please make sure registry config corre seata
查看>>
No compiler is provided in this environment. Perhaps you are running on a JRE rather than a JDK?
查看>>
no connection could be made because the target machine actively refused it.问题解决
查看>>
No Datastore Session bound to thread, and configuration does not allow creation of non-transactional
查看>>
No fallbackFactory instance of type class com.ruoyi---SpringCloud Alibaba_若依微服务框架改造---工作笔记005
查看>>
No Feign Client for loadBalancing defined. Did you forget to include spring-cloud-starter-loadbalanc
查看>>
No mapping found for HTTP request with URI [/...] in DispatcherServlet with name ...的解决方法
查看>>
No mapping found for HTTP request with URI [/logout.do] in DispatcherServlet with name 'springmvc'
查看>>
No module named 'crispy_forms'等使用pycharm开发
查看>>
No module named 'pandads'
查看>>
No module named cv2
查看>>
No module named tensorboard.main在安装tensorboardX的时候遇到的问题
查看>>
No module named ‘MySQLdb‘错误解决No module named ‘MySQLdb‘错误解决
查看>>
No new migrations found. Your system is up-to-date.
查看>>
No qualifying bean of type XXX found for dependency XXX.
查看>>