+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Which table has the ADMIN user/pw (/Thread-Which-table-has-the-ADMIN-user-pw)
Which table has the ADMIN user/pw - H4ZEY - 05-19-2015
So i'm doing an SQLI and here are the tables i've pulled.
CHARACTER_SETS,COLLATIONS,COLLATION_CHARACTER_SET_APPLICABILITY,COLUMNS,COLUMN_PRIVILEGES,ENGINES,EVENTS,FILES,GLOBAL_STATUS,GLOBAL_VARIABLES,KEY_COLUMN_USAGE,PARAMETERS,PARTITIONS,PLUGINS,PROCESSLIST,PROFILING,REFERENTIAL_CONSTRAINTS,ROUTINES,SCHEMATA,SCHEMA_PRIVILEGES,SESSION_STATUS,SESSION_VARIABLES,STATISTICS,TABLES,TABLESPACES,TABLE_CONSTRAINTS,TABLE_PRIVILEGES,TRIGGERS,USER_PRIVILEGES,VIEWS,INNODB_BUFFER_PAGE,INNODB_TRX,INNODB_BUFFER_POOL_STATS,INNODB_LOCK_WAITS,INNODB_CMPMEM,INNODB_CMP,INNODB_LOCKS,INNODB_CMPMEM_RESET,INNODB_CMP_RESET,INNODB_BUFFER_PAGE_LRU,acronims,fieldnaumbers,links,links_group,menu,news,photo,publication,subgenus,taxon
I cant seem to find the admin username/pw columns. I have checked a few of these tables with no luck. Anyone see a table where it might be? I tried taxon, acronims, fieldaumbers, user_privileges. Anyone have any idea which it might be? any of those table names stand out to you? Most of the time I can find easy, this one is a bit of a challenge tho. I am just going through them all looking.
RE: Which table has the ADMIN user/pw - Th3PonyWizard - 05-19-2015
would you kindly learn MySQL
RE: Which table has the ADMIN user/pw - Inori - 05-19-2015
(05-19-2015, 11:30 AM)Th3PonyWizard Wrote: would you kindly learn MySQL
This.
If you're too lazy to learn it, just use common sense. The table names are pretty self-explanatory.
edit: there's a table named columns... I'm no expert, but that sounds blatantly obvious.
RE: Which table has the ADMIN user/pw - Tirus - 06-17-2015
If you learned how to properly read and understand what these table names mean, you won't have a problem with it, will you?
RE: Which table has the ADMIN user/pw - Oni - 06-17-2015
The tables could be named anything. However, most people pick pretty sensible names when it comes to tables. Use common sense and read a bit on MySQL.
RE: Which table has the ADMIN user/pw - Crypt - 06-17-2015
Not every SQLi vulnerable website you come across is going to have a table for admin/user credentials. If you want to be sure, just go through every one of them.
(05-19-2015, 01:24 PM)Chitoge Wrote: This.
If you're too lazy to learn it, just use common sense. The table names are pretty self-explanatory.
edit: there's a table named columns... I'm no expert, but that sounds blatantly obvious.
No. "COLUMNS" is just a table in the information_schema database.
RE: Which table has the ADMIN user/pw - Inori - 06-17-2015
(06-17-2015, 04:36 PM)nothing.nobody Wrote: Not every SQLi vulnerable website you come across is going to have a table for admin/user credentials. If you want to be sure, just go through every one of them.
No. "COLUMNS" is just a table in the information_schema database.
Ah, my mistake. But still, it can probably be figured out with some basic knowledge and common sense.
RE: Which table has the ADMIN user/pw - Master Antrax - 06-21-2015
This is the INFORMATION_SHEMA DB...