still cooking
error-based sql injection
When the application leaks database errors, we can use functions like EXTRACTVALUE() and UPDATEXML() to extract data inside error messages.
·1 min read·easy·recording#sql-injection#error-based#web
← all sql injection labs
Setup, walkthrough, and video coming soon.
// share