sqli-labs (less-35)

sqli-labs (less-35)

Enter 35 levels, enter id=1

http://127.0.0.1/sql1/Less-35/?id=1'

The single quotation marks here are escaped, and we directly view the source code

. GBK encoding is also used here, but we judge that this is a digital injection based on the error message. It doesn’t matter whether there are single quotation marks or not, just pay attention to the hexadecimal transcoding later. It's okay

Determine the echo position

http://127.0.0.1/sql1/Less-35/?id=-1 union select 1,2,3--+

The next steps are exactly the same as those of less-32, I will not introduce them in detail here, please see my less-32 for the specific process