【14】WEB渗透基础[MySql数据库注入]（3）

MySQL数据库表格清单

MySql数据库

释义	SQL语句	其他
当前数据库	SELECT database()	-
所有数据库	SELECT schema_name FROM information_schema.schemata	版本>5.0
	SELECT distinct(db) FROM mysql.db	管理员权限才可以执行
查询表名	SELECT table_schema,table_name FROM information_schema.tables WHERE table_schema != ‘mysql’ AND table_schema != ‘information_schema’	-
查询列名	SELECT table_schema, table_name, column_name FROM information_schema.columns WHERE table_schema != ‘mysql’ AND table_schema != ‘information_schema’	-
获取版本	SELECT @@version	-
当前用户	SELECT user()	-
	SELECT system_user()
用户权限	SELECT grantee, privilege_type, is_grantable FROM information_schema.user_privileges	用户权限
	SELECT grantee, table_schema, privilege_type FROM information_schema.schema_privileges	数据库权限
	SELECT table_schema, table_name, column_name, privilege_type FROM information_schema.column_privileges	字段的权限
列出DBA账户	SELECT host, user FROM mysql.user WHERE Super_priv = ‘Y’
选择第N行	SELECT host,user FROM user ORDER BY host LIMIT 1 OFFSET 0	行从0开始编号
	SELECT host,user FROM user ORDER BY host LIMIT 1 OFFSET 1	行从0开始编号
选择第N个字符	SELECT substr(‘abcd’, 3, 1)        #substr(string string,num start,num length);	返回c
ASCII值->字符	SELECT char(65)	返回A
字符->ASCII值	SELECT ascii(‘A’)	返回65
字符串连接	SELECT CONCAT(‘A’,’B’)	返回AB
	SELECT CONCAT(‘A’,’B’,’C’)	返回ABC
时间睡眠	SELECT SLEEP(5)	版本>= 5.0.12