filmov
tv
OWASP Multidae 2 Tutorials - 2013 - SQL Injection - Extra Data - User Info Part 2

Показать описание
Based on our findings from Part 1, now we look deeper into databases.
We find out the backend database is Mysql
We then search for the databases ( --dbs)
Now we specify the database ( -D)
Now we search for the tables inside the database ( --tables)
Now we specify the Tables ( -T )
Now we search the columns ( --columns)
Now we specify the columns using a comma separated list (column1, column2,)
Now we dump the output of the columns vaules ( --dump)
All together
We find out the backend database is Mysql
We then search for the databases ( --dbs)
Now we specify the database ( -D)
Now we search for the tables inside the database ( --tables)
Now we specify the Tables ( -T )
Now we search the columns ( --columns)
Now we specify the columns using a comma separated list (column1, column2,)
Now we dump the output of the columns vaules ( --dump)
All together