SQL Injection: Probing Database Table Structure Information

Authored by Keniver

Description

Points: 100

This is the internal directory system of RiRiLa Company, a common enterprise system backed by a database. You can input an employee ID to retrieve related information. Use this system to practice SQL Injection techniques.

In real-world scenarios, you may not know the names of tables or columns. You can rely on luck or leverage database features to discover table and column names.

The treasure is stored in tables starting with secret_. Go find it!

Tips

  • MySQL databases include a powerful metadata table called INFORMATION_SCHEMA, which can reveal valuable information about the database structure.
  • Use SQL Injection to query INFORMATION_SCHEMA to uncover table and column names, especially those starting with secret_.

Writeups

There is no content at the moment.