menu Secto白帽博客-专注于技术研究
SQL注入-Note.1
27 浏览 | 2020-03-26 | 分类:渗透测试 | 标签:

0x01 SQL注入原理

参照简单的谈谈SQL注入-前言0x01

0x02 SQL注入的分类

按变量分类:数字和字符型 参照简单的谈谈SQL注入-前言0x03
按提交数据的类型分类:H---HEAD P---POST G---GET C---COOKIE 参见简单的谈谈SQL注入-基本类型0x04
按方式分类:布尔 延时 报错 联合 堆查询 详见简单的谈谈SQL注入-基本类型0x05

0x03 数据库的类型

SQL:常见如oraclemysqlmssql、access,较少的如sqlite、postgersql
非关系型数据库(NOSQL):mongodb、redis(小项目一般也见得少)

0x04 数据库的区别(L)

举例:MySQL MSSQL ACCESS之间的区别
1.MySQL5.0以下没有information_schema这个默认数据库
2.ACCESS没有库名,只有表和字段,并且注入时,后面必须跟表名,ACCESS没有注释 举例:select 1,2,3 from table_name union select 1,2,3 from table_name
3.MySQL使用limit排序,ACCESS使用TOP排序(MSSQL也支持TOP)

0x05 根据他们的区别 所以可以通过语句判断类型

MySQL:and length(user())>10
MSSQL:and (select count(*)from sysobjects)>0
ACCESS:and (select count(*)from MSysAccessObjects)>0

知识共享署名-非商业性使用-相同方式共享 4.0 国际许可协议

发表评论

email
web

全部评论 (暂无评论)

info 还没有任何评论,你来说两句呐!

Emoji

Warning: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 46

Warning: file_get_contents(): Failed to enable crypto in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 46

Warning: file_get_contents(https://...@1.0.2/assets/json/owo.json): failed to open stream: operation failed in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 46

Warning: array_keys() expects parameter 1 to be array, null given in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 48

Warning: count(): Parameter must be an array or an object that implements Countable in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 49

Warning: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 87

Warning: file_get_contents(): Failed to enable crypto in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 87

Warning: file_get_contents(https://...@1.0.2/assets/json/owo.json): failed to open stream: operation failed in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 87

Warning: array_keys() expects parameter 1 to be array, null given in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 89

Warning: count(): Parameter must be an array or an object that implements Countable in /www/wwwroot/www.sectoer.cn/usr/themes/Cuckoo/includes/owo.php on line 90