SQL Injection (POST/Select)

 

Obviously, this problem still uses burpsuit Grab the bag and have a look ：

movie=2          Different from the previous question , Here are the numbers , Guess other numbers are other movies , So how to change it ?

burpsuit Right click to send to Repeater, Just modify the data and send it ！

It is amended as follows 3, It turned into Man of Steel

 

Then modify the data directly on the left post That's all right.

Let's first look at the displayable bits ：

It's exactly the same as the previous questions ！

 

  Let's take a look at the library name :

Next is the table name ：

 

Then the field name ：

 

  Take a final look login and password：

 

Last MD5 Decrypt .