Get the database name in MySQL without using SELECT DATABASE()

Question

I'm trying to do an SQL Injection attack, (This is for an assignment, so I'm not doing anything illegal) and I need to see what the current database name is. However, I'm limited to 15 characters for the input, which is 13 when you factor in escaping the string and commenting out the remainder. SELECT DATABASE() is too long because of this, so is there a way to return the database name in 13 characters or less?

How would I do that? Isn't the character limit evaluated server side? — user3246167
– user3246167, Commented Aug 31, 2017 at 18:15
you could try to send an input longer then 15 chars and test if it works. for more help i would need more information — Roland Starke
– Roland Starke, Commented Aug 31, 2017 at 18:26

kentor · Accepted Answer · 2017-08-31 18:17:55Z

2

You can use SCHEMA() as it's a synonym for DATABASE(). See https://dev.mysql.com/doc/refman/5.7/en/information-functions.html#function_schema

answered Aug 31, 2017 at 18:17

kentor

18.8k28 gold badges100 silver badges154 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user3246167 Over a year ago

That's still above the character limit

Kamran · Accepted Answer · 2017-08-31 18:59:31Z

1

Use STATUS. It gives you several status variables including the name of the database you are connected to.

https://dev.mysql.com/doc/refman/5.7/en/show-status.html

edited Aug 31, 2017 at 18:59

answered Aug 31, 2017 at 18:21

Kamran

8531 gold badge8 silver badges20 bronze badges

2 Comments

Bill Karwin Over a year ago

SHOW STATUS does not include that information. You might be thinking of the mysql client builtin command status which includes the current database. But client builtin commands are not executed by the server, so they're not vulnerable to SQL injection.

Bill Karwin Over a year ago

No... the OP will not be able to run status using SQL injection. It's a client builtin command. One cannot execute client commands using SQL.

Bill Karwin · Accepted Answer · 2017-08-31 19:30:03Z

1

The command SHOW TABLES is only 11 characters, and the heading of the result set reveals the current database.

Here's an example:

mysql> use test;
mysql> show tables;
+----------------+
| Tables_in_test |
+----------------+
| ...            |
+----------------+

answered Aug 31, 2017 at 19:30

Bill Karwin

567k87 gold badges709 silver badges869 bronze badges

Collectives™ on Stack Overflow

Get the database name in MySQL without using SELECT DATABASE()

3 Answers 3

1 Comment

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related