Postgres注入方式总结

《Postgres注入方式总结》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、Postgres注入方式总结Byzcgonvh(zcgonvh@rootkit.net.cn)Blog:z-cg.com2013-06-10目录0x00前言........................................................................................................................10x10基本语法....................................................................................

2、.............................10x11多行查询与代码块............................................................................................10x12Limit.................................................................................................................10x13Unknown类型....................

3、...............................................................................10x14数据类型转换...................................................................................................30x20Schema与目录对象......................................................................................

4、............30x21什么是Schema.................................................................................................30x22通过pg_catalog获取数据库关键信息................................................................40x23通过information_schema获取数据库架构信息............................................

5、.......40x30通过注入点获取数据...............................................................................................50x31Union-Select型注入点.......................................................................................50x32无输出显错型注入点.....................................................

6、...................................70x33无输出无显错型注入点.....................................................................................80x40构建更加精巧的注入语句........................................................................................90x41利用函数聚合字段/结果集...................................

7、.............................................90x42利用多行执行进行复杂查询............................................................................100x43利用多行执行忽略数据类型敏感限制..............................................................100x44利用美元符绕过GPC与pg_escape_strin