Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: SQL injection attack, listing the database contents on non-Oracle databases

a6n1 | Last updated: Sep 02, 2022 12:31AM UTC

Hi, I am trying to do and wanted to check the list of tables, so I tried the UNION SELECT * FROM information_schema.tables and the response was Error 500. I tried the same command in an SQL sandbox and it totally worked. I wanted to know the reason why this certain command is not working in the labs? Please do not say "because it is not intended in the labs". Technically this works in most SQL servers.

Ben, PortSwigger Agent | Last updated: Sep 05, 2022 08:17AM UTC