Web Security
SQL Injection – Querying the Database Type and Version
A practical SQL injection lab about identifying a backend database and retrieving its version.
1 min read
- SQL Injection
- PortSwigger
- MySQL
A practical SQL-injection write-up about identifying the backend database and retrieving version information on MySQL and Microsoft SQL Server.
Focus areas
- Detecting database-specific behavior
- Building a compatible UNION query
- Using version functions and system variables