当前位置：网站首页>记一次edu，SQL注入实战
记一次edu，SQL注入实战
2022-07-06 09:22:00 【又懒有菜】
目录
0x01 思路：inurl: exam result
(存在漏洞的可能性比较大）
探针用rad爬虫+jsfinder爬取到查询接口post
这种功能都有sql select语句（如果过滤不严谨存在注入可能性就比较大）
js前端：身份证号又前端校检18位 绕过才能够抓包
0x02 判断注入
正常发包
单引号报synax语法错误
0x03 报错注入
0x04 sqlmap
剩下的一些直接扔到sqlmap里面跑
边栏推荐
- . How to upload XMIND files to Jinshan document sharing online editing?
- HackMyvm靶机系列(1)-webmaster
- 实验八 异常处理
- Zatan 0516
- 【VMware异常问题】问题分析＆解决办法
- Reinforcement learning series (I): basic principles and concepts
- Experiment 6 inheritance and polymorphism
- 强化学习基础记录
- [modern Chinese history] Chapter 6 test
- Canvas foundation 2 - arc - draw arc
猜你喜欢
Record a penetration of the cat shed from outside to inside. Library operation extraction flag
HackMyvm靶机系列(1)-webmaster
HackMyvm靶机系列(4)-vulny
![[au cours de l'entrevue] - Comment expliquer le mécanisme de transmission fiable de TCP](/img/d6/109042b77de2f3cfbf866b24e89a45.png)
[au cours de l'entrevue] - Comment expliquer le mécanisme de transmission fiable de TCP
Renforcer les dossiers de base de l'apprentissage
2022泰迪杯数据挖掘挑战赛C题思路及赛后总结
Write a program to simulate the traffic lights in real life.
附加简化版示例数据库到SqlServer数据库实例中
Safe driving skills on ice and snow roads
SRC mining ideas and methods
随机推荐
Force deduction 152 question multiplier maximum subarray
JS several ways to judge whether an object is an array
Custom RPC project - frequently asked questions and explanations (Registration Center)
Strengthen basic learning records
HackMyvm靶机系列(7)-Tron
FAQs and answers to the imitation Niuke technology blog project (I)
强化学习基础记录
Detailed explanation of redis' distributed lock principle
Experiment 9 input and output stream (excerpt)
Safe driving skills on ice and snow roads
【黑马早报】上海市监局回应钟薛高烧不化；麦趣尔承认两批次纯牛奶不合格；微信内测一个手机可注册俩号；度小满回应存款变理财产品...
1. First knowledge of C language (1)
Relationship between hashcode() and equals()
[experiment index of educator database]
Renforcer les dossiers de base de l'apprentissage
Experiment 4 array
Harmonyos JS demo application development
Inaki Ading
Reinforcement learning series (I): basic principles and concepts
FAQs and answers to the imitation Niuke technology blog project (III)