Web Security
SQL Injection Attack – Listing Database Contents (Oracle)
A UNION-based SQL injection lab covering database enumeration on Oracle.
1 min read
- SQL Injection
- PortSwigger
- Oracle
A PortSwigger lab write-up covering UNION-based SQL injection against an Oracle database.
Focus areas
- Determining the number and type of returned columns
- Using Oracle-specific system tables
- Enumerating database structure
- Extracting useful values through UNION queries