Login Register
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Which table has the ADMIN user/pw filter_list
Author
Message
Which table has the ADMIN user/pw #1
So i'm doing an SQLI and here are the tables i've pulled.

CHARACTER_SETS,COLLATIONS,COLLATION_CHARACTER_SET_APPLICABILITY,COLUMNS,COLUMN_PRIVILEGES,ENGINES,EVENTS,FILES,GLOBAL_STATUS,GLOBAL_VARIABLES,KEY_COLUMN_USAGE,PARAMETERS,PARTITIONS,PLUGINS,PROCESSLIST,PROFILING,REFERENTIAL_CONSTRAINTS,ROUTINES,SCHEMATA,SCHEMA_PRIVILEGES,SESSION_STATUS,SESSION_VARIABLES,STATISTICS,TABLES,TABLESPACES,TABLE_CONSTRAINTS,TABLE_PRIVILEGES,TRIGGERS,USER_PRIVILEGES,VIEWS,INNODB_BUFFER_PAGE,INNODB_TRX,INNODB_BUFFER_POOL_STATS,INNODB_LOCK_WAITS,INNODB_CMPMEM,INNODB_CMP,INNODB_LOCKS,INNODB_CMPMEM_RESET,INNODB_CMP_RESET,INNODB_BUFFER_PAGE_LRU,acronims,fieldnaumbers,links,links_group,menu,news,photo,publication,subgenus,taxon

I cant seem to find the admin username/pw columns. I have checked a few of these tables with no luck. Anyone see a table where it might be? I tried taxon, acronims, fieldaumbers, user_privileges. Anyone have any idea which it might be? any of those table names stand out to you? Most of the time I can find easy, this one is a bit of a challenge tho. I am just going through them all looking.

Reply

RE: Which table has the ADMIN user/pw #2
would you kindly learn MySQL

[+] 1 user Likes Th3PonyWizard's post
Reply

RE: Which table has the ADMIN user/pw #3
(05-19-2015, 11:30 AM)Th3PonyWizard Wrote: would you kindly learn MySQL

This.

If you're too lazy to learn it, just use common sense. The table names are pretty self-explanatory.

edit: there's a table named columns... I'm no expert, but that sounds blatantly obvious.
It's often the outcasts, the iconoclasts ... those who have the least to lose because they
don't have much in the first place, who feel the new currents and ride them the farthest.

Reply

RE: Which table has the ADMIN user/pw #4
If you learned how to properly read and understand what these table names mean, you won't have a problem with it, will you?

Reply

RE: Which table has the ADMIN user/pw #5
The tables could be named anything. However, most people pick pretty sensible names when it comes to tables. Use common sense and read a bit on MySQL.
[Image: 7ajmN5P.jpg]

Telegram: Oni_SL (Link)

Reply

RE: Which table has the ADMIN user/pw #6
Not every SQLi vulnerable website you come across is going to have a table for admin/user credentials. If you want to be sure, just go through every one of them.

(05-19-2015, 01:24 PM)Chitoge Wrote: This.

If you're too lazy to learn it, just use common sense. The table names are pretty self-explanatory.

edit: there's a table named columns... I'm no expert, but that sounds blatantly obvious.

No. "COLUMNS" is just a table in the information_schema database.
(This post was last modified: 06-17-2015, 04:39 PM by Crypt.)
XMPP - wrath@xmpp.jp

Reply

RE: Which table has the ADMIN user/pw #7
(06-17-2015, 04:36 PM)nothing.nobody Wrote: Not every SQLi vulnerable website you come across is going to have a table for admin/user credentials. If you want to be sure, just go through every one of them.


No. "COLUMNS" is just a table in the information_schema database.

Ah, my mistake. But still, it can probably be figured out with some basic knowledge and common sense.
It's often the outcasts, the iconoclasts ... those who have the least to lose because they
don't have much in the first place, who feel the new currents and ride them the farthest.

Reply

RE: Which table has the ADMIN user/pw #8
This is the INFORMATION_SHEMA DB...

Reply







Users browsing this thread: 1 Guest(s)