497fbe925b
Archive external reference links via Wayback Machine
...
Replace direct URLs in Markdown references with their
web.archive.org equivalents to prevent link rot.
2026-03-09 13:02:28 +01:00
ba62eed782
SQLite extensions
2025-12-07 19:52:51 +01:00
27e6c2aa8d
Replace broken link for SQLite with archive link
2025-09-13 07:51:58 +05:45
2611dd1ba3
Markdown Linting - SQL, Juggling, XSLT, XSS, Zip
2025-03-26 20:53:03 +01:00
3c5bab0338
SQL - File Manipulation and Error Based Injection
2024-11-16 18:49:01 +01:00
9a908a15d2
MSSQL, OracleSQL, PostgreSQL Substring Equivalent
2024-11-16 15:35:43 +01:00
48a4e5c95b
Normalize page header for SQLi, Upload, Cache Deception
2024-11-10 20:49:52 +01:00
b2bb1df9a9
References addded for SQLi, Upload, SSTI, Type Juggling
2024-11-07 20:54:16 +01:00
a5de8cf062
SQL injections references updates
2024-11-03 14:06:53 +01:00
d834abe43c
Update SQLite Injection.md
...
Since sqlite version 3.33.0, sqlite_schema has been replaced by sqlite_master.
2024-04-01 20:46:09 +03:00
d5922f421c
Update SQLite Injection.md
...
Column names of the specified table can be more easily extracted in a better output.
Tested during the CTF
2023-08-25 15:24:52 +05:00
d5f85f13d5
Update SQLite Injection.md
...
add "group_concat" so that all tables can be extracted once when the query only returns the first item
2023-07-16 23:44:00 +08:00
3f3736471e
Merge branch 'master' into patch-4
2022-10-11 11:26:28 +02:00
7663594118
Update SQLite Injection.md
2022-09-07 14:02:38 +02:00
418285b7f6
Boolean - Extract info (order by)
2022-08-13 10:07:54 +05:45
f82efffbc7
Boolean error based* instead of just error based
2022-08-12 18:36:43 +03:00
0d9a2354e5
Add error-based vector for the sqlite
2022-08-12 18:33:44 +03:00
5cc8e698c9
Single quotes are messing with the command.
2022-05-15 13:53:50 +02:00
4ab2649317
Fixing "RCE - Attach Database" Payload
...
The old payload doesn't work for many cases as the `php` in `<?php` is missing.
2021-12-14 19:54:41 +01:00
03427da534
SQLite Injection add extract database structure
2021-12-07 06:51:27 +00:00
3cf44386da
Remove unnecessary condition to extract columns
...
Since we retrieve only the rows with a specific table name `name ='table_name', the table name won't start with `sqlite_` .
Thus, we can remove the unnecessary condition.
2020-11-17 19:59:11 -05:00
009a2f9276
Update SQLite Injection.md
...
Added new link location for the pdf.
2020-04-03 23:15:05 +00:00
a69c2acb7d
Added Summary in SQLite Injection
2019-10-29 19:22:49 +05:30
404afd1d71
Fix name's capitalization
2019-03-07 00:07:55 +01:00
Swissky