update20190811

shack2 · shack2 · commit bfa6f11648c2 · 2019-08-10T18:34:52.000+08:00
update20190811
diff --git a/SuperSQLInjection/payload/MySQL.cs b/SuperSQLInjection/payload/MySQL.cs
@@ -219,13 +219,10 @@ public static String creatMySQLColumnsStrByError(List<String> columns, String ta
         public static String creatMySQLColumnsStr(List<String> columns, String table, String dbName, int limit)
         {
 
-            if (columns.Count <= 1) {
-
-            }
             StringBuilder sb = new StringBuilder("(select concat_ws(0x242424,");
             foreach (String c in columns) {
                 // sb.Append(castMySQLColumn(c)+",");
-                sb.Append(c + ",");
+                sb.Append("ifnull("+c + ",0x20),");
             }
             if (columns.Count > 0)
             {

Original file line number	Diff line number	Diff line change
`@@ -219,13 +219,10 @@ public static String creatMySQLColumnsStrByError(List<String> columns, String ta`
`219`	`219`	`public static String creatMySQLColumnsStr(List<String> columns, String table, String dbName, int limit)`
`220`	`220`	`{`
`221`	`221`
`222`		`- if (columns.Count <= 1) {`
`223`		`-`
`224`		`- }`
`225`	`222`	`StringBuilder sb = new StringBuilder("(select concat_ws(0x242424,");`
`226`	`223`	`foreach (String c in columns) {`
`227`	`224`	`// sb.Append(castMySQLColumn(c)+",");`
`228`		`- sb.Append(c + ",");`
	`225`	`+ sb.Append("ifnull("+c + ",0x20),");`
`229`	`226`	`}`
`230`	`227`	`if (columns.Count > 0)`
`231`	`228`	`{`