PHP manual injection Detection

Small food articles, N not to spray

--------------------------------------

Original tutorial
BY: maya663

--------------------------------------

PHP manual injection Basics

I want to learn and read this article.

---------------------------

Recently, I met a PHP site.

Http://www.bkjia.com (only to replace the target site, not this site)

Http://xxx.com/index.php? Id = 112

This injection point

Judgment basis: and 1 = 1
And 1 = 2, you know, it's basically the same as ASP.

Start manually:

Direct
Order
The statement is used to sort the result set.

The final result is 1.

Several Functions

User () return to the current User

Database () returns the current Database

Version ()
Returns the Mysql version (this is important)

Mysql version> = 4.0 supports Union queries
Mysql> = 5.0 supports information_schema Query

The following table name and field name have been obtained for basic information:

Many tutorials are written with the table name

Admin
Administrator
Manager
User
Users

However, the success count is very small. Why wait a while to read a Mysql database?

This is the table name of the Mysql database.

If you guess, you can't guess it if you're exhausted.

The principle is as follows:

Next we will mention this database.

This is the mysql version5.0Automatically installed Database

Information_schema. Metadata is data about data, such as database name or table name, column data type, or access permission.

My understanding:In useWhen creating a database in the mysql database, the newly created database tables and fields are automatically recorded in the information_schema database.

Table