Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Web Security Academy -> SQL Injection -> SQL injection attack, listing the database contents on Oracle

pennywise01 | Last updated: Mar 09, 2023 02:01PM UTC

So far all the SQL query i ran work and dont have any error but when i am about to display the column name it doesn't have any out put on the page. this is my query : ' UNION SELECT column_name, NULL FROM all_tab_columns WHERE table_name = 'USERS_WOAMLQ '-- Can help me with this?

Hannah, PortSwigger Agent | Last updated: Mar 10, 2023 09:30AM UTC

Hi Have you had a look at the solution for the Web Academy? There are significant differences between the format of the solution payload and your payload.

You need to Log in to post a reply. Or register here, for free.