User Tools

Site Tools


hacking:sql_injection:mysql:find_columns_names

Hacking - SQL Injection - MySQL - Find Columns Names

Finding how many columns:

SELECT query BY ORDER BY

Finding column number by ORDER BY can speed up the UNION SQL Injection process.

ORDER BY 1--
ORDER BY 2--
ORDER BY N-- so on

Keep going until get an error.

Error means you found the number of selected columns.

hacking/sql_injection/mysql/find_columns_names.txt · Last modified: 2020/07/15 09:30 by 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki