逛了一圈发现啥都没有，于是抓包看看，发现存在2个参数
    RFA5D9P2[2]PAKV42RVGY$P.png
    看来是文章内的data信息

    order by 可以查询回显，发现存在2列
    DXD_21PPS`UJB$VQKY@8XR4.png
    联合查询发现最后一行会添加读取
    ![3~I$VHJS[NIB_1SA%3ZJ80.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626229603650-6e787e58-46b2-497d-86b3-aa25ffaf05bc.png#align=left&display=inline&height=146&id=u38c42fbc&margin=%5Bobject%20Object%5D&name=3~I%60%24VHJS%5BNIB_1SA%253ZJ80.png&originHeight=503&originWidth=1515&size=60450&status=done&style=none&width=441)<br />读数据库<br />![IT{(%YLM70ODQ9X{PW%J(N4.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626229647137-fdec78a6-f9fd-418b-957c-c5e989411e8c.png#align=left&display=inline&height=254&id=u98952c4e&margin=%5Bobject%20Object%5D&name=IT%7B%28%25YLM70ODQ9X%7BPW%25J%28N4.png&originHeight=445&originWidth=783&size=23140&status=done&style=none&width=447)<br />读表<br />![C(_%@WQN[_WBP4PHF4TMSYI.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626229737198-f0603dae-2e1a-443d-9297-6b6e890dbe02.png#align=left&display=inline&height=381&id=u7e0bcfa6&margin=%5Bobject%20Object%5D&name=C%28_%25%40WQN%5B_WBP4PHF4TMSYI.png&originHeight=381&originWidth=1800&size=43648&status=done&style=none&width=1800)<br />读列<br />![V}0268DA%V{8VLX6FHT7J)3.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626229835186-e9a69375-dbf7-4e3f-aec3-18d5eaa9046e.png#align=left&display=inline&height=398&id=u4a7e1ef4&margin=%5Bobject%20Object%5D&name=V%7D0268DA%25V%7B8VLX6FHT7J%293.png&originHeight=398&originWidth=1293&size=33239&status=done&style=none&width=1293)<br />读取值，发现能读，但是不在这个库中<br />![4])S(_2UAQ2N[HH$~%6D6OT.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626229921874-df9538a1-0474-4091-b3ea-8b7e5fc54ec7.png#align=left&display=inline&height=335&id=ucf58ade1&margin=%5Bobject%20Object%5D&name=4%5D%29S%28_2UAQ2N%5BHH%24~%256D6OT.png&originHeight=335&originWidth=1306&size=34698&status=done&style=none&width=1306)<br />发现还存在一个 alien_code库<br />以上操作再来一遍<br />最后读出flag<br />![9ION3{NH7H4NMLU700OF86.png](https://cdn.nlark.com/yuque/0/2021/png/528570/1626230017428-9ce2b46f-336b-4a3d-ae43-b81a299038e7.png#align=left&display=inline&height=408&id=u5cef3bea&margin=%5Bobject%20Object%5D&name=9IO%60N3%7BNH7H4NMLU700OF86.png&originHeight=408&originWidth=1230&size=30415&status=done&style=none&width=1230)