Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Basic 18 what am i doing wrong


shiroslullaby's Avatar
Member
0 0

Ive read the tutorials on SQL injection on this site and other places.
Once I use the OR**R B* command and see the article shouldnt I be able to use a UNION ALL SELECT 5 from ******** command?

Ive also tried replacing the 5 with n**l…


Kr4kH3d's Avatar
Member
0 0

It looks like you are 90% of the way there. Now that you've determined how many columns there are, try to display them all on the same page(instead of just the last one.)

There was a very similar thread on this several years ago

https://www.hellboundhackers.org/forum/basic_18-7-15999_0.html

If you still can't seem to figure out the exact statement required, PM me.


Huitzilopochtli's Avatar
....
10 9

Close man but no cigar.

Normally your injection would produce an error like this:

The used SELECT statements have a different number of columns

That's because UNION and UNION ALL require that all the queries being UNIONed have the same number of columns in the SELECT clause.

You already know the correct number of columns, but you are only including the last one.