1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help with SQL Injection

Discussion in 'Ethical hacking' started by Shawn_Rogers, Aug 15, 2011.

  1. Shawn_Rogers

    Shawn_Rogers New Member

    Joined:
    Aug 15, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    OK, so the vulnerable URL that I'm attacking has only one column and the only way to retrieve data from that column is to generate an error. The column normally accepts an int value so any string value returns an error. However, when I try to cast an int to a string as to return an error like:

    union select convert(varchar,zip) from address

    I don't get an error. How can I generate one?
    Additionally, conversion to type text only gives the error "Operand type clash: text is incompatible with int".
     
  2. Scripting

    Scripting John Hoder

    Joined:
    Jun 29, 2010
    Messages:
    421
    Likes Received:
    57
    Trophy Points:
    0
    Occupation:
    School for life
    Location:
    /root
    Mainly add the /* at the end !
     

Share This Page