SQL injection UNION attack, retrieving data from other tables
A writeup of PortSwigger's SQL injection lab for extracting data from other tables.
Koussay Dhifi
PortSwigger SQL Injection Lab 8 — Finding a Column That Accepts Strings
A writeup of PortSwigger's SQL injection lab for identifying the column that can display string data in a UNION query.
PortSwigger SQL Injection Lab 7 — Determining the Number of Columns
A writeup of PortSwigger's SQL injection lab for determining how many columns the original query returns.
PortSwigger SQL Injection Lab 6 — Listing Database Contents on Oracle
A writeup of PortSwigger's Oracle SQL injection lab for enumerating tables, columns, and credentials.
PortSwigger SQL Injection Lab 5 — Listing Database Contents on Non-Oracle Databases
A writeup of PortSwigger's SQL injection lab for enumerating database tables and columns on non-Oracle systems.
PortSwigger SQL Injection Lab 4 — MySQL Version Enumeration
A writeup of PortSwigger's SQL injection lab for retrieving the MySQL version through UNION-based injection.
PortSwigger SQL Injection Lab 3 — Oracle Version Enumeration
A writeup of PortSwigger's Oracle-based SQL injection lab for extracting the database version with a UNION attack.
PortSwigger SQL Injection Lab 2 — Login Bypass
A writeup of PortSwigger's login bypass lab, demonstrating how to bypass authentication with SQL injection.
PortSwigger SQL Injection Lab 1 — Retrieving Hidden Data
A writeup of PortSwigger's first SQL injection lab, showing how to retrieve hidden data by injecting into a WHERE clause.
PicoCTF SqlMap1 Writeup
A writeup of the PicoCTF SqlMap1 challenge using SQL injection and password cracking.