Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

Web Security Academy -> SQL Injection -> SQL injection attack, listing the database contents on Oracle

pennywise01 | Last updated: Mar 09, 2023 02:01PM UTC

So far all the SQL query i ran work and dont have any error but when i am about to display the column name it doesn't have any out put on the page. this is my query : ' UNION SELECT column_name, NULL FROM all_tab_columns WHERE table_name = 'USERS_WOAMLQ '-- Can help me with this?

Hannah, PortSwigger Agent | Last updated: Mar 10, 2023 09:30AM UTC

Hi Have you had a look at the solution for the Web Academy? There are significant differences between the format of the solution payload and your payload.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.