SQL injection Knowledge Base-mysql article (1)

Mysql

Default database

Information_schema available in more than 5 versions

MySQL requires root privileges

Test injection:

False means that the query is not available

True indicates that the query is available

Character type:

Use the following query: SELECT * FROM table where id = ' 1 ';

' False

' True

"False

"" True

\ False

\ True

Example

• SELECT * FROM articles WHERE id = ' 1';
• Select 1 from dual WHERE 1 = ' 1 ', ' "'" 'UNION SELECT ' 2';
• SELECT * FROM student where id = ' 1\ \';

Note:

1. Use as many as possible, as long as you can pair

2.

3.

SQL injection Knowledge Base-mysql article (1)