Скачать или смотреть Why Do Hackers Want Your Database Schema? What Is It And How Do They Get It?

We uncover an SQL injection vulnerability that allows for exfiltration of the entire database schema.

We'll also learn what the database schema is and why hackers want it.

00:00 Introduction - What is a database schema?
00:34 Why do we care about the database schema?
00:59 Exploring the search box for possible vulnerabilities
04:05 Why the search box is not injectable
04:50 Tampering with the http request and submitting a test payload
05:40 Analyzing the exposed SQL query
06:42 Crafting an SQL injection attack
08:03 UNION SELECT, what, why and how?
10:29 SQL injection attacks for column enumeration.
14:29 Crafting the final SQL injection payload with reference to the SQLite docs.
16:26 Submitting the final SQL injection payload via the URL query string.