Through the execution of many commands to extend the execution time, judge whether there is a return error SQL Inject .

for example :

login.asp?id=1 and (SELECT count(*) FROM MSysAccessObjects AS T1, MSysAccessObjects AS T2, MSysAccessObjects AS T3, MSysAccessObjects AS T4, MSysAccessObjects AS T5, MSysAccessObjects AS T6,
MSysAccessObjects AS T7,MSysAccessObjects AS T8,MSysAccessObjects AS T9,MSysAccessObjects AS T10,MSysAccessObjects AS T11,MSysAccessObjects AS T12)>0 and select count(*) from sys_admin

payload:

and (SELECT count(*) FROM MSysAccessObjects AS T1, MSysAccessObjects AS T2, MSysAccessObjects AS T3, MSysAccessObjects AS T4, MSysAccessObjects AS T5, MSysAccessObjects AS T6,
MSysAccessObjects AS T7,MSysAccessObjects AS T8,MSysAccessObjects AS T9,MSysAccessObjects AS T10,MSysAccessObjects AS T11,MSysAccessObjects AS T12)>0

Learning notes ACCESS More about delayed injection

  1. SQL Antipattern learning notes 21 SQL Inject

    The goal is : To write SQL A dynamic query , prevent SQL Inject What is usually said “SQL A dynamic query ” It means that the variables in the program and the basic SQL Statements are spliced into a complete query statement . Anti pattern : Execute the unverified input as code Direction SQL Insert a string into the query string ...

  2. SpringMVC: Learning notes (11)—— Dependency injection and @Autowired

    SpringMVC: Learning notes (11)—— Dependency injection and @Autowired Use @Autowired from Spring2.5 Start , It introduces a new way of dependency injection , That is, through @Autowired annotation . This annotation allows ...

  3. Spring 4.0.2 Learning notes (2) - Automatic injection and properties The use of documents

    Continue with the passage , After learning the basic injection usage , Maybe someone will feel a little bit upset like me ,Programmer Each Field, At least one setter, such spring It can only be used in the configuration file <property> ...

  4. 3. wing sqlmap Study notes Cookie Inject

    Cookie Inject : 1. Suppose this URL "http://www.xxx.org/Show.asp?id=9" There are injection points .2.sqlmap Enter the following at the command prompt to run the meter . sqlmap ...

  5. AngularJS The dependence of learning notes

    Recently in to see AngularJS Authoritative guide , For a variety of reasons ( Mainly because I didn't have money, What a nuisance ......), So I chose to download the electronic version online ( Because it doesn't need money , ha-ha ...), The font is also very clear , The overall effect is not yet ...

  6. Spring.NET Learning notes 6—— Dependency injection ( Application articles )

    1. When it comes to high-level language programming , We think of design patterns : When it comes to design patterns , We'll talk about decoupling . and Spring.NET Of IoC One of the uses of containers is decoupling , Its most classic application is : Dependency injection (Dependeny I ...

  7. CTFHub Web Study notes (SQL Put in the solution writeup)

    Web Under the question SQL Inject 1, Integer Injection Use burpsuite,?id=1%20and%201=1 id=1 The data still appears , Prove the existence of integer type injection routine , Look at the number of fields , Echo location ?id=1%20orde ...

  8. JavaScript Learning notes ( One )—— Delay object 、 Cross domain 、 template engine 、 Pop-up layer 、AJAX Example

    One .AJAX Example AJAX Its full name is “Asynchronous JavaScript And XML”( asynchronous JavaScript and XML) It refers to a development technology for creating interactive web applications . Improve user experience , Achieve no refresh effect ...

  9. Unity Learning notes (4): Dependency injection

    Unity The implementation of dependency injection includes constructor injection . Attribute injection . Methods to inject , The so-called injection is equivalent to assignment , Let's introduce 1: Constructor injection 1.1 When a class has more than one constructor , Can pass InjectionConstructor characteristic ...

Random recommendation

  1. java Multithreading classes :JUC Atomic classes :01 The framework of

    This series is all about http://www.cnblogs.com/skywang12345/p/3514589.html It is hereby explained that !!!!! According to the modified data type , Can be JUC The atomic operation classes in the package can be divided into ...

  2. Just recently MVC4.0 What you learn from page usage

    I recently joined a new company , There are many things to learn , The first thing to learn is @using(new Ajax.beginForm("",null,new AjaxOptions() { OnSuccess ...

  3. Java Interview question 7

    Thirty-four . Encoding conversion , How to realize will GB2312  Encoded string converted to ISO-8859-1  Encoded string . String a=new String(" in ".getBytes("gb ...

  4. iOS And const

    const int a And int const a equally . const int *a ;// The pointer can be modified , A pointer to a constant shape int* const a;// Constant pointer , int* Limited as a whole , So it means ...

  5. imitation qq Interface implementation (WTL)

    I've tried to use the interface before duilib, But the old feeling and MFC There's a bit of a gap , Finally found WTL The library can realize all my interface functions , After a few days of hard work, I finally finished rewriting the interface . Let's see what I've achieved : 1 Login screen : 2 main interface : 3. Main boundary ...

  6. BZOJ1078: [SCOI2008] Slant pile

    subject :http://www.lydsy.com/JudgeOnline/problem.php?id=1078 Every entry point must be a far left node , And then turn the whole tree it's in right and left . Plus the handling of some situations . ...

  7. part2

    One . list . Tuple operation section : Take multiple elements #!/usr/bin/env python # _*_ coding:utf-8 _*_ # section : Take multiple elements names = ['cai','xiao','lo ...

  8. 【 Gym - 101138J 】Valentina and the Gift Tree( The tree chain splits )

    BUPT2017 wintertraining(15) 4 D Gym - 101138J data The question n A tree of nodes , The weight of each node is g,q A asked , Nodes on the tree U-V, seek U To V The largest sub segment of the path and . ...

  9. Appium - choice 、 Operational elements

    Select interface elements Operational elements ( Click on . The input character . Drag and drop . Get various properties of page elements ) according to Appium The obtained data are analyzed and processed desired_capabilities see appPackage and appActiv ...

  10. oracle Direct reading and writing ms sqlserver database ( Two ) Configure transparent gateway

    Environmental statement : Database version :11gR2 Transparent gateway version :11g operating system Windows Server2008_64 position ORACLE_HOME Catalog :D:\app\Administrator\product\1 ...