4.9
966
inurl index php db information schema as bxct where 9849 9849 procedure analyse extractvalue 7257,concat 0x5c, benchmark 5000000,md5 0x514e774b ,1 #
using PROCEDURE ANALYSE (EXTRACTVALUE) on Url? [support]...
Статья - SQL-injection, Error Based - XPATH - Codeby.net
Выведем названия таблиц: 1' and updatexml(null,concat(0x7B,(select table_name from information_schema.tables where table_schema='my_db' limit 0,1),0x7D),null) 2. Установить параметр display_errors = on в /etc/php/8.1/apache2/php.ini.
drive.google.com
MySQL XML Функции
ASCII таблица / Программирование / stD
MariaDB 5.5.65 sql injection - Stack Overflow
HTB: Proper | 0xdf hacks stuff
XPATH Error Based Injection Extractvalue
mariadb - SQL-injection, unable to get it to work! - Information Security...
Example: {"limit":"1 procedure analyse(extractvalue(rand(),concat(0x3a,(SELECT concat(0x3a,schema_name) FROM information_schema.schemata LIMIT 0,1))),1)-- 1"}. The information does not usually directly identify you, but it can give you a more personalized experience.
Metal+gear+solid+2+PROCEDURE+ANALYSE(EXTRACTVALUE...
Библиотека Pandas: самоучитель для начинающих
MySQL DoS in the Procedure Analyse Function – CVE-2015-4870
SQL Injection | HackTricks | HackTricks
Моя большая практическая шпаргалка SQL (SQLite)... / Хабр
Онлайн сервис по расшифровке хеш-кодов (SHA1, 32 bit...