yuil :: SecOps

[WebSec] SQL 실습 본문

실습/Web Security 실습

[WebSec] SQL 실습

yuil.lee 2025. 10. 20. 09:43
win2k
쿼리 분석기 실행

쿼리 분석기
[Windows 인증]
webhack

SELECT	*
FROM	member;

SELECT	*
FROM	member
WHERE	age >= 25;

SELECT	name
FROM	member
WHERE	age >= 25;

SELECT	name, age
FROM	member
WHERE	age >= 25;

SELECT	name, age
FROM	member
WHERE	age >= 20 and age <= 25;

SELECT	name, age
FROM	member
WHERE	age between 20 and 25;

SELECT	name, age, address1
FROM	member
WHERE	age between 20 and 25;

SELECT	name, age, address1
FROM	member
WHERE	age >= 30 and address1 = '지하철역';

SELECT	name, age, address1
FROM	member
WHERE	name like '김%';

SELECT	name, age, address1
FROM	member
WHERE	name like '%혜%';

SELECT	count(*)
FROM	member

SELECT	*
FROM	member

SELECT	count(address2)
FROM	member

SELECT	*
FROM	member

값이 비어있어도 카운트한다(null x)

xp
신규 회원가입

SELECT	count(age)
FROM	member

SELECT	*
FROM	member

null은 제외하여 카운트

SELECT	count(name)
FROM	member
WHERE	name like '이%'

SELECT	*
FROM	member
WHERE	name like '이%'

SELECT	max(age)
FROM	member;

SELECT	avg(age)
FROM	member;

SELECT	min(age)
FROM	member;

SELECT	age, count(age)
FROM	member
GROUP BY age

SELECT	age, count(age)
FROM	member
GROUP BY age
HAVING	age <= 30

SELECT	name, age, user_id
FROM	member

SELECT	strName, intReadno
FROM	board

SELECT	name, user_id
FROM	member
UNION
SELECT	strName, intReadno
FROM	board

데이터 타입을 맞춰야 한다.

SELECT	name, age
FROM	member
UNION
SELECT	strName, intReadno
FROM	board

회원 가입 없이 계정 생성
INSERT INTO member (user_id, user_pw, name, nickname, age)
VALUES ('whitehat', 'hackers', 'attacker', '착한 사람', 27)

SELECT	*
FROM	member
WHERE	user_id = 'whitehat'

회원가입 없이 로그인 성공

SELECT * FROM member WHERE user_id='whitehat'

UPDATE	member
SET	user_pw='P@ssw0rd',
	nickname='나쁜 사람'
WHERE	user_id='whitehat'

SELECT * FROM member WHERE user_id='whitehat'

password 변경됨
변경된 패스워드로 로그인 확인

SELECT * FROM member WHERE user_id='whitehat'

DELETE
FROM	member
WHERE	user_id='whitehat'

SELECT * FROM member WHERE user_id='whitehat'

 

반응형

'실습 > Web Security 실습' 카테고리의 다른 글

[WebSec] SQL Lab 02  (0) 2025.10.20
[WebSec] SQL Lab 01  (0) 2025.10.20
[WebSec] CSRF 공격 방어 실습  (0) 2025.10.17
[WebSec] CSRF 공격 Lab 05  (0) 2025.10.17
[WebSec] CSRF 공격 Lab 04  (0) 2025.10.17