加个双引号
通过报错信息猜测SQL语句
select ... from ... where xxx=("") and yyy=("") limit 0,1
将括号闭合掉，通过注释后面的条件登录
sqli-labs less12 POST - Error Based - Double quotes- String-with twist (基于错误的双引号POST型字符型变形的注入)
Posted superkrissv
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了sqli-labs less12 POST - Error Based - Double quotes- String-with twist (基于错误的双引号POST型字符型变形的注入)相关的知识，希望对你有一定的参考价值。
以上是关于sqli-labs less12 POST - Error Based - Double quotes- String-with twist (基于错误的双引号POST型字符型变形的注入)的主要内容，如果未能解决你的问题，请参考以下文章
sqli-labs less12 POST - Error Based - Double quotes- String-with twist (基于错误的双引号POST型字符型变形的注入)
sqli-labs less34 POST- Bypass AddSlashes (POST型绕过addslashes() 函数的宽字节注入)
sqli-labs less13 POST - Double Injection - Single quotes- String -twist (POST型单引号变形双注入)
sqli-labs less42 POST -Error based -String -Stacked(POST型基于错误的堆叠查询字符型注入)
sqli-labs less45 POST -Error based -String -Stacked Blind(POST型基于盲注的堆叠字符型注入)
sqli-labs less19 POST - Header Injection - Referer field - Error based (基于头部的Referer POST报错注入)