Pseudo-Static injection

Everyone is familiar with the dynamic site of SQL injection, the Internet has a lot of resources.

Pseudo static pseudo-static injection point lookup:

1. Manual injection of Judgment (as with dynamic injection method):

1) normal page display,

2) in the URL plus "'", the page is not normal display, such as:

3) Add "and 1=1" to the website, the Web page is displayed normally,

4) Add "and 1=2" on the URL, the webpage is not normal,

This page has SQL injection

2. Use the tool sqlmap for injection detection:

Construct the URL and add special characters such as: *, #等等

The detection is as follows:

Pseudo-Static injection