SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle

[@RanaKhalil101]

Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨

[@MoviesEpicShot]

hi, i have been watching your videos but today im stuck on this lab 7, i have followed everything but it giving me errror when i try to check order by 1--. can you please reply

[@mostafasayed2783]

جزاكى الله خيرا ونفعك وزادك من فضله فى الدنيا والاخرة بأذن الله

[@rodrigoa.cascao1553]

I really like your classes

[@nathanzebedee5263]

your content is awesome

[@faysal_skt]

This is really helpful 👌 Thank you!! For the video,mam

[@jaman_pentester]

Very Helpful

[@fdisnightwing2517]

Great video! Thanks so much. Would loved to see this written in Go(lang) if you'd be up for it just to see how it compares!

[@michaelwalker2995]

Great videos !!!!!

[@amjadal-kadhi1199]

Well done

[@TomJerry-zt2bp]

Hello Rana, the default query is "SELECT banner FROM v$version" but in the payload you put a comma (,) after banner (UNION select banner, NULL from v$version). I don't understand this one. It would be of great help if you can kindly explain little bit more about the payload.

[@ramseyibe2844]

Because in the original query there are two columns so the Null represent the second column since as we only need banner in the first column and we can't leave the second column empty we put Null so if it were 3 columns we put UNION SELECT banner,Null,Null FROM v$version

[@ApkaBhaiTechnical]

@@ramseyibe2844 thanks for explain

[@MidnightSpecter43]

1) is there any way in which we can combine multiple row result in one row ?? 2) how to get all database name or schema name in oracle ??

[@vikramjeetsingh9756]

Mam why are not making more videoq

[@benchristian942]

Genius

[@invisibleman6104]

Your videos are good but I challenge you to hack me ;-)