常规mysql注入
在mysql较高版本上有一个自带的数据库information_schema记录数据库所有表,字段的信息。
- 表信息:information_schema.tables表中有列:table_schema,table_name
- 字段信息:information_schema.columns表中有列:table_schema,table_name,columns_name
- 如果注入无限制的情况下,union select table_name,table_schema from information_schema.tables(或者columns)
- union select columns_name from information_schema.columns where table_name=‘xxx‘ and table_schema=‘xxx‘
- union select ‘xxx‘ from ‘你查的表名‘
相关推荐
emmm00 2020-11-17
王艺强 2020-11-17
aydh 2020-11-12
世樹 2020-11-11
zry 2020-11-11
URML 2020-11-11
spurity 2020-11-10
yifangs 2020-10-13
Andrea0 2020-09-18
Ida 2020-09-16
ltd00 2020-09-12
tufeiax 2020-09-03
xjd0 2020-09-10
greatboylc 2020-09-10
adsadadaddadasda 2020-09-08
疯狂老司机 2020-09-08
CoderToy 2020-11-16
ribavnu 2020-11-16
bianruifeng 2020-11-16