Home > 闲聊灌水区

显错注入新靶场1-4关拿flag

a641953279 · 发表于 2020-01-13 20:38:43 · 闲聊灌水区

第一关：
![](https://bbs.zkaq.cn/upload/md/cf5892d278e089c2294db9dad00a2f89_55906.png)
![](https://bbs.zkaq.cn/upload/md/b3354e9afef40f86672d43c80c532775_19858.png)
![](https://bbs.zkaq.cn/upload/md/a665a863cec1dae03b62516365efb839_92451.png)
![](https://bbs.zkaq.cn/upload/md/1d49ed22db55a7c89b8c173d6d174ee5_74432.png)
判断： 有注入点 且对传参没有做任何限制
![](https://bbs.zkaq.cn/upload/md/0d59fb78a5fd0a441921ccc0cec74c7a_16841.png)
![](https://bbs.zkaq.cn/upload/md/8ac5776e59bbdb77867ce214dc95b0df_65788.png)
判断：表的字段数 3
![](https://bbs.zkaq.cn/upload/md/fa88e8c811a682795cc096695c154a1d_20184.png)
判断：2 3 为可显示位
![](https://bbs.zkaq.cn/upload/md/c3763099fbc60bb0f9ca41360d295da8_63546.png)
![](https://bbs.zkaq.cn/upload/md/d7541b17e7d7d9dd743414ec5bfc7d8d_72857.png)
![](https://bbs.zkaq.cn/upload/md/e87b601a839d7ca62e46c9090ea5bd2a_57302.png)
![](https://bbs.zkaq.cn/upload/md/73d6c9b82a13e6c09882ffc10b3de4ef_64714.png)

第二关
![](https://bbs.zkaq.cn/upload/md/f9ceaedcc8f21ac9f4c2b5b7a0c822e6_52072.png)
![](https://bbs.zkaq.cn/upload/md/0e51bfc6aaaa40c22584c0f7c3c61e8f_14945.png)
判断：输入’ and 1=1%23时，正确，’ and 1=2%23时，报错。存在注入点。第一个单引号要跟前面的闭合%23注释掉后面的单引号
![](https://bbs.zkaq.cn/upload/md/dd335c5b02f61094af60cb65b6970371_16929.png)

第三关：（跟第二关类似）
![](https://bbs.zkaq.cn/upload/md/741da4c1f9a6732807b89f7223bfb1de_67188.png)
![](https://bbs.zkaq.cn/upload/md/96fef5d4e43861bf33f4c93dd3f30268_55503.png)
![](https://bbs.zkaq.cn/upload/md/f8f69cd99b018713388cc55084f6efc1_38777.png)

第四关：（跟第二关类似）
![](https://bbs.zkaq.cn/upload/md/6bc230d14f41f355f1281238906decfb_66421.png)
![](https://bbs.zkaq.cn/upload/md/c6b05f47838146ef9248370282bea403_19064.png)
![](https://bbs.zkaq.cn/upload/md/3836ba8d9888ed0f1abcf4bd79e44747_32802.png)

打赏我,让我更有动力~

0 Reply | Until 2020-1-13 | 1486 View

LoginCan Publish Content