WEBBUG3.0 Rookie Note 1

Penetration Learning notes-basic--sql injection (character type) http://bbs.51cto.com/viewthread.php?tid=1148930

Penetration Learning notes-basic--sql injection (digital type) http://bbs.51cto.com/thread-1149929-1.html

Dleo Blogger wrote the answer http://www.cnblogs.com/hongren/p/7616378.html PS: Written more than the official

Order By: Allows the retrieved data to be sorted in ascending or descending order, and is also used to guess the number of columns

1 ' : Single quote error get information need to close single quotation mark to complete injection eg:1 ' ORDER by 5 '. Note that there is a single quotation mark after 5, otherwise the query does not come out. Then click Submit

Information_schema: This is a Xinhua dictionary that contains all the information from the MySQL database, storing all the information in the database. Information that is stored with various other data

Tables: This table contains information about all the tables in the database, it has field table_name (table name), Table_schema (the database in which the table resides)

Columns: it has column_name,table_schema,table_name

WEBBUG3.0 Rookie Note 1