{"id":346,"date":"2023-09-21T21:46:56","date_gmt":"2023-09-21T13:46:56","guid":{"rendered":"https:\/\/www.zjydiary.top\/?p=346"},"modified":"2024-03-30T16:24:08","modified_gmt":"2024-03-30T08:24:08","slug":"0x12%e6%95%b0%e6%8d%ae%e5%ba%93%e6%9f%a5%e8%af%a2%e8%af%ad%e5%8f%a5","status":"publish","type":"post","link":"https:\/\/www.zjydiary.top\/?p=346","title":{"rendered":"0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"6376\" height=\"2636\" src=\"https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5.png\" alt=\"\" class=\"wp-image-348\" srcset=\"https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5.png 6376w, https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5-300x124.png 300w, https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5-1024x423.png 1024w, https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5-768x318.png 768w, https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5-1536x635.png 1536w, https:\/\/www.zjydiary.top\/wp-content\/uploads\/2023\/09\/0x12\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5-2048x847.png 2048w\" sizes=\"auto, (max-width: 6376px) 100vw, 6376px\" \/><\/figure>\n\n\n<h1>\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5<\/h1>\n<h2>SQL\u6ce8\u5165<\/h2>\n<h3>\u627e\u5230\u6ce8\u5165\u70b9<\/h3>\n<ul>\n<li>\n<p>\u670d\u52a1\u5668\u8c03\u7528\u4e86\u6570\u636e\u5e93<\/p>\n<\/li>\n<li>\n<p>\u53c2\u6570\u53ef\u63a7<\/p>\n<\/li>\n<\/ul>\n<h3>\u6784\u9020\u8f6e\u5b50\uff08POC\uff09<\/h3>\n<ul>\n<li>\n<p>admin'or 1=1 --<\/p>\n<\/li>\n<li>\n<p>MySQL\u6ce8\u91ca\u7b26\u53f7<\/p>\n<hr \/>\n<ul>\n<li>\n<p>#<\/p>\n<\/li>\n<li>\n<p>\/<em> <\/em>\/<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3>\u67e5\u8be2\u8bed\u53e5<\/h3>\n<ul>\n<li>select * from admin where username='123'and password=\u2018123\u2019<\/li>\n<\/ul>\n<h2>\u67e5\u8be2\u8bed\u53e5<\/h2>\n<h3>select<\/h3>\n<ul>\n<li>\n<p>from \u8868\u540d<\/p>\n<ul>\n<li>\n<p>[where \u6761\u4ef6\u8868\u8fbe\u5f0f1]<\/p>\n<\/li>\n<li>\n<p>[group by \u5c5e\u6027\u540d1 [having \u6761\u4ef6\u8868\u8fbe\u5f0f2]]<\/p>\n<\/li>\n<li>\n<p>[order by \u5c5e\u6027\u540d2 [asc | desc]]<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>\u96c6\u5408\u51fd\u6570<\/h2>\n<h2>\u6b63\u5219\u8868\u8fbe\u5f0f<\/h2>\n<h3><a href=\"https:\/\/zh.wikipedia.org\/zh-cn\/%E6%AD%A3%E5%88%99%E8%A1%A8%E8%BE%BE%E5%BC%8F\" target=\"_blank\"  rel=\"nofollow\" >https:\/\/zh.wikipedia.org\/zh-cn\/%E6%AD%A3%E5%88%99%E8%A1%A8%E8%BE%BE%E5%BC%8F<\/a><\/h3>","protected":false},"excerpt":{"rendered":"\u6587\u7ae0\u6982\u8981\uff1a\u8be5\u6587\u7ae0\u8ba8\u8bba\u4e86\u6570\u636e\u5e93\u67e5\u8be2\u8bed\u53e5\u4e2d\u7684 SQL \u6ce8\u5165\u95ee\u9898\uff0c\u5f3a\u8c03\u4e86\u627e\u5230\u6ce8\u5165\u70b9\u7684\u91cd\u8981\u6027\u3002\u6587\u7ae0\u63d0\u5230\u4e86\u670d\u52a1\u5668\u8c03\u7528\u6570\u636e\u5e93\u65f6\u53c2\u6570\u7684\u53ef\u63a7\u6027\uff0c\u4ee5\u53ca\u6784\u9020\u8f6e\u5b50\uff08POC\uff09\u7684\u65b9\u6cd5\u3002\u4e3e\u4f8b\u4e86MySQL\u6ce8\u91ca\u7b26\u53f7\u548c\u67e5\u8be2\u8bed\u53e5\u7684\u7ed3\u6784\uff0c\u5305\u62ecwhere\u3001gr","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[9,3],"tags":[14,11],"class_list":["post-346","post","type-post","status-publish","format-standard","hentry","category-9","category-3","tag-14","tag-11"],"_links":{"self":[{"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/posts\/346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=346"}],"version-history":[{"count":2,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/posts\/346\/revisions"}],"predecessor-version":[{"id":349,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=\/wp\/v2\/posts\/346\/revisions\/349"}],"wp:attachment":[{"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zjydiary.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}