admin管理员组

文章数量:1589777

靶场内容：

This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie.

The SQL query is executed asynchronously and has no effect on the application’s response. However, you can trigger out-of-band interactions with an external domain.

To solve the lab, exploit the SQL injection vulnerability to cause a DNS lookup to Burp Collaborator.

Learning path

note：
To prevent the Academy platform being used to attack third parties, our firewall blocks interactions between the labs and arbitrary external systems.
To solve the lab, you must use Burp Collaborator’s default public server (burpcollaborator).

解决方法

  • 这里直接使用xxe注入
  • server. For example, you

本文标签： 外带半成品sqlblindLab

版权声明：本文标题：Lab: Blind SQL injection with out-of-band interaction：利用外带交互的盲注（半成品） 内容由热心网友自发贡献，该文观点仅代表作者本人， 转载请联系作者并注明出处：https://m.elefans.com/xitong/1728076971a1144606.html， 本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容，一经查实，本站将立刻删除。