Posts tagged: #Union-Injection

After enumerating user privileges 🌿 if you find one which has FILE you can use that to read files from the target.

UNION SELECT LOAD_FILE('/etc/passwd')

References

• Enumerating databases, tables, columns, and user privileges with SQL injection 🌿
• Writing files with MySQL 🌱