简体   繁体   中英

SQLMap host does not seem to be injectable, does this mean there are no vulnerabilities?

python sqlmap.py -u "https://localhost:8080" --level=5 --risk=5

[15:13:30] [WARNING] parameter 'Host' does not seem to be injectable
[15:13:30] [CRITICAL] all tested parameters do not appear to be injectable

SQLMap outputted this after many testing rows, is this the normal behaviour of the program or did I enter the url incorrectly?

Image shows whole output:

在此处输入图像描述

... is this the normal behaviour of the program or did I enter the url incorrectly?

According to the output sqlmap did not find any vulnerable injection point.

Normally, -u would also require to specify parameters for testing, but since you've specified --level and --risk , sqlmap tried to inject into http headers with extended payload set. Some responses were suspected for vulnerability in Host header, but finding was not confirmed.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM