Thật không may, không có cách nào dễ dàng để nói, bởi vì hầu hết các lệnh SQL yêu cầu một tên bảng hợp lệ để có thể có để có được sáng tạo trong việc xác định thông tin này. Thực hiện tấn công SQL, mù hoặc nếu không, chắc chắn là có thể. | Sniffing Chapter 10 381 Sniffit SYNGRESS Sniffit is another sniffer that has been around for several years. It is available for several operating systems including Linux Solaris SunOS Irix and FreeBSD. Sniffit has not been updated in a few years but I have found it to be quite stable even though the last release was classified as a beta . Brecht Claerhout the author of Sniffit has two versions available on his Web site released in April 1997 and released in July 1998 . I have had no problems compiling and using but if you encounter problems with then you can still fall back and use . Brecht s Web site is located at http coder sniffit . One of the reasons I like and use Sniffit so much is that you can easily configure it to log only certain traffic such as FTP and Telnet. This type of filtering is not unusual it is available in other sniffers such as Sniffer Pro and NetMon. But when was the last time you saw either one of those sniffers covertly placed on a compromised system Sniffit is small and easily configured to capture and log only traffic that you know carries useful information in the clear such as usernames and passwords for certain protocols as shown in the following example Tue Mar 28 09 46 01 2000 - Sniffit session started. Tue Mar 28 10 27 02 2000 - USER hansen Tue Mar 28 10 27 02 2000 - PASS worksux Tue Mar 28 10 39 42 2000 - login trebor Tue Mar 28 10 39 47 2000 - password goaway Tue Mar 28 11 08 10 2000 - login jaaf Tue Mar 28 11 08 17 2000 - password 5g5g5g5 Tue Mar 28 12 45 21 2000 - USER afms Tue Mar 28 12 45 21 2000 - PASS smfasmfa 382 Chapter 10 Sniffing Tue Mar 28 14 38 53 2000 hohman Tue Mar 28 14
