SQL Injection

Database Extraction

SQLite

SELECT sqlite_version()
SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'
SELECT name FROM pragma_table_info('sample_table')

MySQL

SELECT version()
SELECT database()
SELECT database()
SELECT column_name FROM information_schema.columns WHERE table_schema='sample_database' AND table_name='sample_table'

PostgreSQL

SELECT version()
SELECT current_database()
SELECT table_name FROM information_schema.tables WHERE table_schema='public'
SELECT column_name FROM information_schema.columns WHERE table_schema='public' AND table_name='sample_table'

Last updated