- Structured Query Language
- SQL Injection
- Windows 10
- Oracle Virtual Box
- Kali Linux
- Burpsuite
- Parrot OS
- Docker
- Hack the Box - CTF
Getting an Error:
Using burpsuite, I am able to gain an insight that normally would remain hidden and inaccessible.
Understanding the error:
Knowing that I have access to the underlying error in the SQL syntax, I can experiment with the parameters until I understand exactly what is causing the error. In this case, it appears that double quotation marks " are the cause of the error.
The Payload:
The payload was a simple "OR 1 = 1" statement, followed by a comment that ignored everything that came after it.
Results:
- SQLI Fundamentals