SQLInjectionWiki
SQLInjectionWiki copied to clipboard
A wiki focusing on aggregating and documenting various SQL injection methods
Added traversing directories with MySQL in executingOScommands.
Add error based enumeration in section Error Based Injection using `ORDER BY` and a increasing number to determine amount of columns, e.g. value `ORDER BY 1 `=> correct response (sorted...
Query changed
This is a good project, I am now translating this WIKI into a Chinese version, you can add this hyperlink to README.md. ### Chinese version: [http://sqlwiki.radare.cn](http://sqlwiki.radare.cn) [https://github.com/kevins1022/SQLInjectionWiki](https://github.com/kevins1022/SQLInjectionWiki)
Add a description for unions that require specific data types. We try to use null to be agnostic, but this is not fool proof. Example: `SELECT "mysql","test" UNION SELECT @@version,null`...
Removed invalid function a(), which should have been database().