当前位置:网站首页>sqli-labs第8关(布尔盲注)
sqli-labs第8关(布尔盲注)
2022-07-02 06:29:00 【藤原千花的败北】
概念:
布尔盲注:页面回显信息只有“真”与“假”两种状态,通过将猜测的值与ASCII码比较返回真假值进验证。
步骤:
1.求闭合字符
2.求当前数据库名的长度
3.求当前数据库名的ASCII值
4.求表的数量
5.求表名的长度
6.求表名对应的ASCII值
7.求列的数量
8.求列名的长度
9求列名对应的ASCII值
10.求字段数量
11.求字段长度
12.求字段对应ASCII值
思路:
1、判断注入点:
2、求库名长度------id=1’ and length(database())=8 --+
3.求数据库名的ASCII值:-------------ascii(substr(database(),1,1))=115 --+
4、求表的数量:

5.求表名长度
6.求表名的ASCII值
7.求列的数量
8.求列名长度
9.求列名对应的ASCII值
10.求字段数量
11.求字段长度
12.求字段对应ASCII值
待续。。。
边栏推荐
- Global and Chinese market of wire loop, 2022-2028: Research Report on technology, participants, trends, market size and share
- Principes fondamentaux de la théorie musicale (brève introduction)
- C语言的库函数
- Introduction to anti interception technology of wechat domain name
- On the back door of deep learning model
- 16: 00 interview, came out at 16:08, the question is really too
- 使用Matplotlib绘制图表初步
- W10 is upgraded to W11 system, but the screen is black, but the mouse and desktop shortcuts can be used. How to solve it
- Array and string processing, common status codes, differences between PHP and JS (JS)
- How to wrap qstring strings
猜你喜欢

链表经典面试题(反转链表,中间节点,倒数第k个节点,合并分割链表,删除重复节点)

W10 is upgraded to W11 system, but the screen is black, but the mouse and desktop shortcuts can be used. How to solve it

Matlab mathematical modeling tool

静态库和动态库

Development of digital collection trading website development of metauniverse digital collection
![[dynamic planning] p4170: coloring (interval DP)](/img/52/76f8baebb19fe10db91c74fec9a697.jpg)
[dynamic planning] p4170: coloring (interval DP)

Carsim 学习心得-粗略翻译1

Vs code configuration problem

Using transformer for object detection and semantic segmentation

c语言自定义类型枚举,联合(枚举的巧妙使用,联合体大小的计算)
随机推荐
Dynamic extensible representation for category incremental learning -- der
Makefile基本原理
使用Matplotlib绘制图表初步
On the confrontation samples and their generation methods in deep learning
OpenCV3 6.3 用滤波器进行缩减像素采样
Smart agriculture solutions smart agriculture system development
Global and Chinese markets for Salmonella typhi nucleic acid detection kits 2022-2028: Research Report on technology, participants, trends, market size and share
Global and Chinese market of tillage finishing machines 2022-2028: Research Report on technology, participants, trends, market size and share
install.img制作方式
Sequence problem for tqdm and print
Simple implementation scheme of transcoding and streaming (I)
Li Kou daily one question brushing summary: binary tree chapter (continuous update)
文件上传-upload-labs
Summary of one question per day: stack and queue (continuously updated)
乐理基础(简述)
C language implements XML generation and parsing library (XML extension)
How to uninstall SQL Server cleanly
16: 00 interview, came out at 16:08, the question is really too
樂理基礎(簡述)
STL速查手册