当前位置:网站首页>BUUCTF刷题笔记——[极客大挑战 2019]EasySQL 1
BUUCTF刷题笔记——[极客大挑战 2019]EasySQL 1
2022-07-06 02:58:00 【永远是少年啊】
今天继续刷BUUCTF的题,今天解决[极客大挑战 2019]EasySQL 1。
一、题目基本信息
我们进入链接,打开网站,结果如下所示:
二、解题思路
从上图中可以看出,我们的目标站点是一个登录页面。结合题目信息,我们可以猜测该题目是解题为SQL注入方向。
我们简单的在用户名处尝试带有单引号的用户名admin’,结果如下所示:
从上图可以看出,这是一个简单的报错的SQL注入。
接下来,我们尝试在刚才的用户名后面添加一个#,尝试过滤后面的内容,结果如下所示:
三、拿到flag
从上述尝试很容易分析处,这个题目非常简单,基本上没有进行过滤,我们尝试使用万能密码,用户名admin’ or 1=1#,密码随意,点击登录后,结果如下所示:
从上图中可以看出,我们成功拿到了该题目的flag。
原创不易,转载请说明出处:https://blog.csdn.net/weixin_40228200
边栏推荐
- [Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 22
- [Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 10
- [Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 12
- [Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 13
- Introduction to robotframework (I) brief introduction and use
- Atcoder beginer contest 233 (a~d) solution
- codeforces每日5题(均1700)-第六天
- Daily question brushing plan-2-13 fingertip life
- Yyds dry inventory comparison of several database storage engines
- Fault analysis | analysis of an example of MySQL running out of host memory
猜你喜欢
全国大学生信息安全赛创新实践赛初赛---misc(永恒的夜)
[Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 10
How to accurately identify master data?
【Kubernetes 系列】一文學會Kubernetes Service安全的暴露應用
Modeling specifications: naming conventions
2345 file shredding, powerful file deletion tool, unbound pure extract version
Misc (eternal night), the preliminary competition of the innovation practice competition of the National College Students' information security competition
C # create self host webservice
[network security interview question] - how to penetrate the test file directory through
Microsoft speech synthesis assistant v1.3 text to speech tool, real speech AI generator
随机推荐
主数据管理(MDM)的成熟度
Classic interview question [gem pirate]
Single instance mode of encapsulating PDO with PHP in spare time
[Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 16
Shell script updates stored procedure to database
Introduction to robotframework (II) app startup of appui automation
How to accurately identify master data?
微服务注册与发现
会员积分营销系统操作的时候怎样提升消费者的积极性?
[Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 15
[Chongqing Guangdong education] higher mathematics I reference materials of Southwest Petroleum University
codeforces每日5题(均1700)-第六天
[Yunju entrepreneurial foundation notes] Chapter II entrepreneur test 8
Codeworks 5 questions per day (1700 average) - day 6
A copy can also produce flowers
Maturity of master data management (MDM)
CobaltStrike-4.4-K8修改版安装使用教程
Daily question brushing plan-2-13 fingertip life
Spherical lens and cylindrical lens
一个复制也能玩出花来