SQL injection attack, querying the database type and version on MySQL ... (Video solution, Audio)

preview_player
Показать описание
This video shows the lab solution of "SQL injection attack, querying the database type and version on MySQL and Microsoft" from Web Security Academy (Portswigger)

Рекомендации по теме
Комментарии
Автор

If your query isn't working, make sure # is encoded to %23

So, the query should look like: category=whatever' Somethingsomething %23

kallikantzaros
Автор

Hi, Michael. Thank you very much for your videos as they`ve been a great help to me :)

I was just wondering though, why is the 'hashtag' used when querying the database type and version on MySQL and Microsoft, but not on Oracle ?

mrskeptic
Автор

Hi Michael, thank you for your videos!!! Have been of great help!!!
I have a query here. How do we get the output without using burp proxy? I meant directly putting query in browser...

gaurichaudhari
Автор

I solved the lab with same steps as you ok we got it but where is the version then? I can't find the version info.

feritkardal
Автор

It's not working for me I have made the exact syntax but giving me the same error

anudeepreddy
Автор

😭😢it is not working in my case plz help

manmath