SQL injection attack, listing the database contents on non-Oracle databases (Video solution, Audio)

[@jeremias93m]

why isnt column_name in the cheat_sheet ?

[@slavicslav7459]

Hello Michael, I have a question regarding the query which returns information_schema.tables. I was not able to find out anywhere else, so I am going to ask you. Why do we have to use table_name, NULL in this query? I can not comprehend, why we have to use table_name instead of *. For the life of me, I can not figure this out. I am not talking about the NULL part of the query. I understand that. What I am asking about is using a direct parameter (table_name) over the wildcard character (*). Thanks a lot for the answer.