SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle

In this video, we cover Lab #7 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product category field. To solve the lab, we perform a UNION based SQL injection attack that queries the database type and version on Oracle.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

▬ Links ▬▬▬▬▬▬▬▬▬▬

[IkromIsmoiljonov]

Dear Rana, I wanted to take a moment to express my deepest gratitude for the incredible knowledge you've shared. Your teachings have been truly invaluable, and I can't thank you enough for the positive impact they've had on my learning journey. Please keep inspiring and empowering others with your expertise!

[SudoSrijan]

O My God... You make Operations like these look very simple. I was hovering on this concept in my OSCP lab since last 5 hours

[erroregrammaticale]

Respect from Italy. Thanks a lot for your job. I'm learning so much from you. Perfect teacher! really <3

[abhimanyuchoubey]

In the same lab, i dont find any internal server error while checking the number of columns. Can you tell me the error.

[abhimanyuchoubey]

Why we used NULL in one column, even though we know both the column contain text?

[radchad]

how did you know that it is vulnerable to sqli by just putting a single quote?

[mananjindal]

' UNION SELECT banner, NULL FROM v$version--

Why the upper query is working and the lower is not?

' UNION SELECT NULL, banner FROM v$version--

Both the columns are having type string but still, this query is not working....

[abdulx]

Hi, In my case it's showing ' Internal Server Error ' While I put this code ' UNION SELECT banner, NULL form v$version--

[ultimate]

Hi there.

Gread video. I tried your method and it worked. But I also tried a different method to find the number of columns in a table. It did not work so i just wanted to ask you.

What i did was:
- In the repeater, i used '+UNION+SELECT+NULL, NULL-- instead of the ORDER BY method you used.
- It kept showing me internal server error.

I remember reading that the number of nulls used should correspond to the number of columns in the table. Moreover, the nul method is apparently a better option because as portswigger says, "NULL is convertible to every common data type, so it maximizes the chance that the payload will succeed when the column count is correct.".

Will it be possible for you to explain what is happening here?

[kurkureAK]

Mam, Please make more videos on SQL Injection (Portswigger)

[default_deb]

is it ok to use : Gifts'+union+SELECT+banner, NULL+FROM+dual, v$version--

[nidhisingh]

While I am intercepting, and adding order by clause in the repeater tab, it is always giving me 400 response code. What am I doing wrong.

[zzzzzzzzZzZZzzzaZzz]

I have a question how do I know the type of database

[adep.]

مافيش قناه بالعربى مالو العربى يارانا😂