https://blog.1sec.day/tags/sql%E6%B3%A8%E5%85%A5/ Recent content in SQL注入 on 思安录 | Thinking's Security Notes Hugo -- gohugo.io zh-cn Thinking Thinking Thu, 08 Feb 2018 00:00:00 +0000 https://blog.1sec.day/posts/2018-02-08-yxcms-1-4-6-vulnerability-collection/ Thu, 08 Feb 2018 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2018-02-08-yxcms-1-4-6-vulnerability-collection/ https://blog.1sec.day/posts/2018-01-02-axublog-sqli-to-getshell/ Tue, 02 Jan 2018 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2018-01-02-axublog-sqli-to-getshell/ https://blog.1sec.day/posts/2017-12-19-phpcms-962-vulnerabilities/ Tue, 19 Dec 2017 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2017-12-19-phpcms-962-vulnerabilities/ https://blog.1sec.day/posts/2017-11-21-duomicms-filter-bypass/ Tue, 21 Nov 2017 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2017-11-21-duomicms-filter-bypass/ https://blog.1sec.day/posts/2017-11-17-appcms-code-audit/ Fri, 17 Nov 2017 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2017-11-17-appcms-code-audit/ https://blog.1sec.day/posts/2017-08-31-oracle-sql-injection-summary/ Thu, 31 Aug 2017 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2017-08-31-oracle-sql-injection-summary/ <p>最近遇到 Oracle 注入的测试越来越多，而互联网上 Oracle 注入的总结相对少见（MySQL 的资料则铺天盖地）。为了能快速进行漏洞测试和挖掘，便想把之前学习的 Oracle 注入方式温习一遍并整理成文。本文参考了 Oracle 官方文档、互联网上各位前辈的博客以及几本经典 paper，期待和师傅、前辈们讨论交流。文中的 <code>user</code> 值均为 <code>SQLINJECTION</code>。</p> <blockquote> <p>说明：本文初稿写于 2017 年 8 月，此次归档时对过时的版本与权限说明做了更新，并在关键处用 note 标注。</p> </blockquote> https://blog.1sec.day/posts/2017-05-19-mysql-ctf-features/ Fri, 19 May 2017 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2017-05-19-mysql-ctf-features/