当前位置:网站首页>Sqli labs level 8 (Boolean blind note)
Sqli labs level 8 (Boolean blind note)
2022-07-02 08:34:00 【Defeat of Fujiwara Qianhua】
Concept :
Bull's blind note : Only “ really ” And “ false ” Two kinds of state , By comparing the guessed value with ASCII Code comparison returns true and false values for verification .
step :
1. Find the closed character
2. Find the length of the current database name
3. Find the current database name ASCII value
4. Find the number of tables
5. Find the length of the table name
6. Find the... Corresponding to the table name ASCII value
7. Find the number of columns
8. Find the length of the column name
9 Find the... Corresponding to the column name ASCII value
10. Find the number of fields
11. Find the length of the field
12. Find the field correspondence ASCII value
Ideas :
1、 Determine the injection point :
2、 Find the length of database name ------id=1’ and length(database())=8 --+
3. Find the name of the database ASCII value :-------------ascii(substr(database(),1,1))=115 --+
4、 Find the number of tables :

5. Find the length of table name
6. Table name ASCII value 
7. Find the number of columns
8. Find the length of column name
9. Find the... Corresponding to the column name ASCII value
10. Find the number of fields
11. Find the length of the field
12. Find the field correspondence ASCII value
To be continued ...
边栏推荐
- OpenCV关于x,y坐标容易混淆的心得
- Matlab-其它
- How to apply for a secondary domain name?
- Programming ape learning English - imperative programming
- Jumping | Blue Bridge Cup
- 16: 00 interview, came out at 16:08, the question is really too
- HCIA—應用層
- 使用Matplotlib绘制图表初步
- Using C language to realize MySQL true paging
- Live broadcast platform development, flexible menu, and freely adjust the horizontal size of the menu bar
猜你喜欢

IP协议与IP地址

sqli-labs第2关

Introduction to parameters of CarSim pavement 3D shape file

How to build the alliance chain? How much is the development of the alliance chain
![[untitled]](/img/6c/df2ebb3e39d1e47b8dd74cfdddbb06.gif)
[untitled]

zipkin 简单使用

Static library and dynamic library

Don't know mock test yet? An article to familiarize you with mock

Generate database documents with one click, which can be called swagger in the database industry

k8s入门:Helm 构建 MySQL
随机推荐
Installation and use of simple packaging tools
c语言将字符串中的空格替换成%20
Introduction to anti interception technology of wechat domain name
Matlab-其它
Constant pointer and pointer constant
Web security -- Logical ultra vires
Matlab-其它
Analysis of the use of comparable, comparator and clonable interfaces
St-link connection error invalid ROM table of STM32 difficult and miscellaneous diseases
Don't know mock test yet? An article to familiarize you with mock
Using C language to realize MySQL true paging
Chrome debugging
web安全--逻辑越权
Rotating linked list (illustration)
Use of OpenCV 6.4 median filter
使用wireshark抓取Tcp三次握手
Intelligent manufacturing solutions digital twin smart factory
Network security - summary and thinking of easy-to-use fuzzy tester
Opencv3 6.3 reduced pixel sampling with filters
Summary of one question per day: String article (continuously updated)