SQL Injection - Lab #4 SQL injection UNION attack, finding a column containing text

[@RanaKhalil101]

Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨

[@roastedChick3n]

For the viewers who's wondering what's the datatype used in column1 and column3. The column1 is using int datatype, I think column1 is referring to id number of the product and for column3 it's using decimal datatype which is used in prices. You could try this SQLi attack: ' UNION select 1, ''a", 1.2-- This will evaluate to true because we identified the datatypes correctly.

[@nishantdalvi9470]

We can UNION columns of different data types in majority of SQL databases like MySQL, SQLite etc there are only few DBMS like Microsoft access and Db2 which doesn't gives Unioned columns output because those columns have different data types so can we assume that in this lab one of these two DBMS are taken in use ?

[@mostafasayed2783]

جزاكى الله خيرا ونفعك وزادك من فضله فى الدنيا والاخرة بأذن الله

[@damianhamilton4681]

Great stuff! Well organized lesson pattern as usual, and the scripting work at the end is highly appreciated.

[@hunt3razad]

Great tutorial thanks rana

[@fusillator]

Hi thanks for the fun videos, there's a little typo, if the lab is not already solved your code will always find the hardcoded string in the hint paragraph.. anyway a really easy fix is using the return code or searching for the error message inverting the match searching for 'Internal Server Error' not in r.text or using soup.find_all("th", string=stringa) as condition

[@hackandmove]

Rana, thank you so much for these lessons. I hope you get to more of these long versions.

[@sid076226]

super helpful tutorials Mrs. Rana.... looking forward to more portswigger lab solution videos by you!!

[@ДмитрийКузнецов-я4д]

This is truly gold, thanks a million

[@md_daud]

Script time is very exciting

[@tamilincognito9291]

Your content also very useful. More videos upload we are support your videos

[@cybersec-radar]

Very very helpfull.... Thanks alot

[@sudipdutta9349]

Very detailed video.I liked ur explanation...Keep uploading such contents👍👍

[@rodrigoa.cascao1553]

Very good class!

[@fairchild9able]

Great Job Bud ! :-)

[@freeearning984]

thanks for tutorial

[@sto2779]

Programming this was tricky and interesting (using C code)...

[@panachaiboonyoo1553]

Great !!!!!!!

[@randriamahandryrado9800]

Hi, first thank you for this great tuto. But i don't understand why you don't have to use URL encoded in the second request when finding thé column type ?

[@nishantdalvi9470]

We can UNION columns of different data types in majority of SQL databases like MySQL, SQLite etc there are only few DBMS like Microsoft access and Db2 which doesn't gives Unioned columns output because those columns have different data types so can we assume that in this lab one of these two DBMS are taken in use ?

[@tmeerkais7191]

thank you it was helpful , but i get error everytime i try to run the program , but i guess this is not problem with the code , its just with my pc

[@siemens_c65]

thanks for the video, but apparently something has changed on the site and now, even with an error of 500, there is a mention in the response body of the line that needs to be received and therefore the script says that it found the text in 1 column

[@はてな-p3b]

Hi, please refer to @fusillator 's comment. So, enter the following from line 28 if "Internal Server Error" not in res: if string.strip('\'') in res: return i Or, temporary workaround. First, set the web page to "solved". Then run the script.

[@captainnitin9627]

In lab 4 I will get some error like an error occurred.we apologise for the inconvenience help me

[@LeslieJhe]

I love your videos but you waste too much time going over what you did in the last video, maybe you are doing it to make your videos longer but it is indeed time wasting.