Extended SQL injection with Overflow

When I read the magazine hack in the box, I saw an article about how to expand the SQL injection attack method with the overflow method. Therefore, I wrote a record under the blog mark. I have previously mentioned the XSS method with overflow: Overflow.

When using a common statement injection, you may encounter the following error. In this case, you can consider using overflow to implement SQL injection (tested on MySQL 5.0.92 ):

The following is the injection statement provided by the author. % is missing at the beginning of 28 in the third row:

 

 

At the end of the article, the author also provides some injection statements that bypass WAF, the method is relatively old, but sometimes you can look back when you need to inject, as a record:

 

 

From: riusksk's blog