Category Archives: SQL Injections

Error based SQL injection Get Database name or Guess current Columns


To get the Database name in MySql 5.5.20 use this in the url query ?id=xx() – see the result in the picture “sqli” is my test database to guess the current table columns use ?id=x(x) this will use a native … Continue reading

Posted in SQL Injections | Tagged | Leave a comment