mysql注入 - 小灰博客

Tag 文档归类: mysql注入

常用注入命令[转]

文章来源：小灰博客| 时间：2014-03-13 12:22:36| 作者：Leo　| 1 条评论

//看看是什么权限的

and 1=(Select IS_MEMBER(‘db_owner’))

And char(124)%2BCast(IS_MEMBER(‘db_owner’) as varchar(1))%2Bchar(124)=1 ;–

//检测是否有读取某数据库的权限

and 1= (Select HAS_DBACCESS(‘master’))

And char(1 [Read More…]

查看该文章 » 文章分类：IT技术分享、Windows、其他、安全技术、小技巧标签： Leo、mysql注入

MYSQL注入

文章来源：小灰博客| 时间：2013-07-08 13:07:36| 作者：Leo　| 8 条评论

大家都知道，危害我们网站安全较多的漏洞还是注射漏洞。无论腾讯、百度、SINA等等大型网站都惊现过注入漏洞，今天讲解的是PHP+MYSQL的注入。我们注重的不是WEB语言而是数据库.了解一条SQL语句是如何运行。

常规WEB语言与数据库搭配方法:php+mysql、ASP+ACC、JSP+ORACLE、ASPX+MSSQL等等搭配都有

以下判断是否存在注入漏洞的语句.其中/*在MYSQL中是 [Read More…]

查看该文章 » 文章分类：MYSQL、PHP 标签： mysql注入

分类

Android (4)
ASP (4)
HTML (29)
IOS (8)
IT技术分享 (161)
Javascript (21)
MYSQL (12)
Photoshop (1)
PHP (71)
SEO (4)
Windows (17)
其他 (34)
安全技术 (19)
小技巧 (47)
小灰闲谈 (11)
心情随写 (9)
程序囧事 (44)

随便看看

最新评论

We send a transfer from unknown user. Next > https://graph.org/GET-BITCOIN-TRANSFER-02-23-2?hs=9e710a17c6f1893b8975843ad65a53ec&:fqrvth
Ticket: SENDING 0.75905835 BTC. Next => https://graph.org/GET-BITCOIN-TRANSFER-02-23-2?hs=189b84788c5e6405c53f7dd1193b9874&:h8yo8m
+ 0.75386069 BTC.NEXT - https://graph.org/GET-BITCOIN-TRANSFER-02-23-2?hs=d9564a149cf7ebbc725fcfce1bd3d512&:bc1353
Sending a transfer from unknown user. Take >> https://graph.org/GET-BITCOIN-TRANSFER-02-23-2?hs=b0daecdb412780460f6d70d2ebe7020c&:aau2lw
You have received a message(-s) № 221889. Open >> https://telegra.ph/Binance-Support-02-18?hs=bd8a1e7af9a0091b9e1cfeb86b9552cb&:kqpbhi
Notification; Operation №IV67. Go to withdrawal => https://telegra.ph/Binance-Support-02-18?hs=08b576daf9c0848743e65271d9d88559&:qwsyif
+ 0.75961990 BTC.NEXT - https://telegra.ph/Binance-Support-02-18?hs=20bcd57ec809274e19061c909e168662&:p4uthc
We send a transaction from our company. Withdrаw =>> https://telegra.ph/Binance-Support-02-18?hs=3f08de96112b4bab631df916e9c95f9e&:5k6fth
Notification: Transaction №TN98. ASSURE =>> https://telegra.ph/Binance-Support-02-18?hs=8b618b6f3e2558ea545b01f25c66ea45&:5jevqs
Sending a transaction from unknown user. Continue > https://telegra.ph/Binance-Support-02-18?hs=1d869d5a917cbf0e695c5782af266195&:nnl072
+ 0.75788585 BTC.GET - https://telegra.ph/Get-BTC-right-now-01-22?hs=9e710a17c6f1893b8975843ad65a53ec&:80ymq4
You have a email № 897905. Read >>> https://telegra.ph/Get-BTC-right-now-01-22?hs=7fc809c4247ff3bb3e2b81fd7b90d625&:whaht3
You have received a message # 76978. Go >>> https://telegra.ph/Get-BTC-right-now-01-22?hs=3da051666d269a0bc63a99730221a24b&:pt6kzb
You got a transfer from user. Get => https://telegra.ph/Get-BTC-right-now-01-22?hs=3f08de96112b4bab631df916e9c95f9e&:zi27wf
You have received a notification № 252423. Read >>> https://telegra.ph/Get-BTC-right-now-01-22?hs=8b618b6f3e2558ea545b01f25c66ea45&:z91sjl
We send a transfer from unknown user. Continue >> https://telegra.ph/Get-BTC-right-now-01-22?hs=e4c49dd9cb5ed33f97a29bc92a741521&:iiaw99
You have a transaction from unknown user. GЕТ => https://telegra.ph/Ticket--6974-01-15?hs=9e710a17c6f1893b8975843ad65a53ec&:409z2a
Ticket: TRANSFER 0,75924235 BTC. Next => https://telegra.ph/Ticket--6974-01-15?hs=8f87d0d2843e103c87c4bd683c9bda39&:mqjjeh
Email- Transaction #WX47. ASSURE > https://telegra.ph/Ticket--6974-01-15?hs=48af46897a78ce23e02d3d6d91453c82&:30gz1l
You have 1 email № 583291. Open >> https://telegra.ph/Ticket--6974-01-15?hs=46cca2220f62b645c465c3659609f169&:hudwy0

链接表