SQL Injection

Database Extraction

SQLite

Purpose	Query
Get version	SELECT sqlite_version()
Get all available tables	SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'
Get all columns from table	SELECT name FROM pragma_table_info('sample_table')

MySQL/MariaDB

Purpose	Query
Get version	SELECT version()
Get current database	SELECT database()
Get current user	SELECT user()
Get all available databases	SELECT schema_name FROM information_schema.schemata
Get all available tables	SELECT table_name FROM information_schema.columns WHERE table_schema='sample_database'
Get all columns from table	SELECT column_name FROM information_schema.columns WHERE table_schema='sample_database' AND table_name='sample_table'

PostgreSQL

Purpose	Query
Get version	SELECT version()
Get current database	SELECT current_database()
Get current user	SELECT user SELECT current_user SELECT session_user SELECT usename FROM pg_user SELECT getpgusername()
Get all available tables	SELECT table_name FROM information_schema.tables WHERE table_schema='public'
Get all columns from table	SELECT column_name FROM information_schema.columns WHERE table_schema='public' AND table_name='sample_table'