Web Security
SQL Injection – Listing Database Contents on Non-Oracle Databases
A database-enumeration lab using information-schema tables on a non-Oracle database.
1 min read
- SQL Injection
- PortSwigger
A PortSwigger lab write-up covering database enumeration through an injectable query on a non-Oracle database.
Focus areas
- Discovering table names
- Discovering column names
- Extracting application data
- Understanding how information-schema tables support enumeration