MySQL – Page 14 – WindowsTechs.com

Google Cloud launches its Business Application Platform based on Apigee and AppSheet

Posted on September 8, 2020 by Frederic Lardinois

Unlike some of its competitors, Google Cloud has recently started emphasizing how its large lineup of different services can be combined to solve common business problems. Instead of trying to sell individual services, Google is focusing on solutions and the latest effort here is what it calls its Business Application Platform, which combines the API […] Continue reading Google Cloud launches its Business Application Platform based on Apigee and AppSheet→

select from table programatically in mysql

Posted on September 5, 2020 by Charlie Wells

Need something where I can select from a table using a function.
Example:
SELECT * FROM HEX(UNHEX(‘users’)) which should select from a table called "users"
This is just an example but the general idea is I want to be able to use … Continue reading select from table programatically in mysql→

Using hexes to select from other schematas in SQL injection

Posted on September 5, 2020 by Charlie Wells

Consider the following query
SELECT * FROM 0x7573657273 WHERE username = ‘Username’;
As you can see, the 0x7573657273 will evaluate to users and it will work fine.
However, if I tried to select from another schemata using the same method, … Continue reading Using hexes to select from other schematas in SQL injection→

Is it possible to locate web document root using SQL query/SQL Injection?

Posted on August 22, 2020 by maximillian1

I have access to MySQL database which the current user has FILE privilege. I want to upload a web shell but I do not know the root directory of the web server.
Is it possible to somehow locate the root directory using a SQL query?

Continue reading Is it possible to locate web document root using SQL query/SQL Injection?→

Get Your SQL Statements Right the First Time With SQL Lint

Posted on August 18, 2020 by Sven Gregori

What’s your average success rate of getting a SQL statement right on the first try? In best case, you botched a simple statement without side effects and just have to try again with correct syntax or remove that typo from a table name, but things can easily go wrong fast …read more

Continue reading Get Your SQL Statements Right the First Time With SQL Lint→

MySQL password rotation: Using a single user to change other user passwords

Posted on August 16, 2020 by user1751825

I’m currently working on setting up a password rotation strategy for an AWS Aurora/MySQL based application.
My plan was to use a strategy like this…

Application usernames/passwords stored in AWS SSM encrypted parameters.
Application ser… Continue reading MySQL password rotation: Using a single user to change other user passwords→

Mysql Privilege Escalation [closed]

Posted on August 6, 2020 by pmt9

I have a mysql user (version 5.5). Role is only USAGE can’t do load_file function, is possible to privilege escalation?

Continue reading Mysql Privilege Escalation [closed]→

SQLMap Only Returns information_schema

Posted on July 26, 2020 by maximillian1

I run this command python sqlmap.py -u https://acme.com/post.php –data "id=1" –tamper="between,randomcase,space2comment" -v 3 –random-agent –dbs but SQLMap only returns information_schema database.
Is there somethin… Continue reading SQLMap Only Returns information_schema→

Sqlmap not detects error based injection

Posted on July 17, 2020 by Badddy

I am working on Hack the VM (hard machine) for my OSCP preparation
There is a web app with two drop down boxes.. Year and month.. both contain numbers and a submit to fetch data from DB based on year and month
Now when I change the month v… Continue reading Sqlmap not detects error based injection→

ORDER BY sort direction is exploitable in SQL Injection?

Posted on July 11, 2020 by Citylight

I am testing an internal application and come across a page where if I am able to make the application display a SQL error because it does not recognize the payload for ORDER BY sort direction. The query is:
select xxx
from something
whe… Continue reading ORDER BY sort direction is exploitable in SQL Injection?→