摘要: [German] SQL Injection with INFORMATION_SCHEMA*******************************************************# WEBSECURITY DOCUMENTATION ## -------------------------------------- ## SQL Injection with INFORMATION_SCHEMA ## --------------------------... 阅读全文
posted @ 2013-05-09 20:23 jeremyatchina 阅读(277) 评论(0) 推荐(0) 编辑
摘要: PHP+MySQL 手工注入语句大全 推荐我PHP手工太菜了, 无奈只能补下PHP MYSQL手工注射,把收集总结的资料分享下。暴字段长度Order by num/*匹配字段and 1=1 union select 1,2,3,4,5…….n/*暴字段位置and 1=2 union select 1,2,3,4,5…..n/*利用内置函数暴数据库信息version() database() user()不用猜解可用字段暴数据库信息(有些网站不适用):and 1=2 union all select version() /*and 1=2 union all select database() 阅读全文
posted @ 2013-05-09 20:15 jeremyatchina 阅读(938) 评论(0) 推荐(0) 编辑
摘要: False SQL Injection and Advanced Blind SQL Injection########################################################################## ## Exploit Title: False SQL injection and advanced blind SQL injection ## Date: 21/12/2011 ## Author: wh1ant ## Company: trinitysoft ## Group: secu... 阅读全文
posted @ 2013-05-09 16:06 jeremyatchina 阅读(208) 评论(0) 推荐(0) 编辑