Extracting Database Information from Information_Schema

In Full Disclosure Episode 11, we show you how to extract information from our Wordpress SQL Database. Wordpress is open source, so we were able to look up information about Wordpresss Database structure. However, what do we do if the Web application is not open source? How do we know what tables and columns to extract information from? In this VBlog, Im going to explain how to use the Information_Schema database to extract information about a websites tables and columns.

Category:

Howto & Style

Tags:

• Infinity
• Exists
• Full
• Disclosure
• hacking
• website
• database
• sql
• injection
• information
• schema

[PrehistoricPinup]

S.Q.L not sequel

[Gregorpm]

Sequel is SQL read the wiki jackass.

[zetasan]

No external user should be able to inject any SQL statement in any way. This is a bug in the WordPress.

[Gregorpm]

The point of the video is to show how an attacker can extract database information through a SQL Injection flaw... Of course no user "should" be able to do this, that why it's called a flaw.

[hacknixx]

I need someone who is capable of hacking* websites & accessing their email database

I don't need scraping,web crawling or extractors,I need this sites HACKED

I will need to test the result u give me,if it checks out I shall send u 3000$ ASAP and 10-20 websites monthly,which will

increase upon delivery of faster & quality service

Pls note,CONTINUITY is what I am after...

PLEASE SEND ME A MAIL IF U CAN DO THIS ; omorye007 (at) yahoo (dot) com

[dn1440dn]

i can use a proxy on some of the hot spots.

[bajo0123]

this is hack friend ?

[jis2507]

Why don't you make any new videos!?!? It been ages!!!

[teenseek]

i get to the part of lilo conf at time line 8:10 but im having trouble navigating the menu on the bottom to save the lilo config. could you please help wioth this, i got this far and id really like to finish, verry frustrated. thankx for your time...

[dodo3773]

Hey go to services>start networking then check your wicd network manager if anything you should see more access points.

[GuitarReaper77]

I had the same problem once i got backtrack, and my solution was to buy a

Netgear WG111v2 usb wifi adapter. This solved that problem for me.

[niravwaste]

hi i wanted to know one thing abt backtrack. when i load window xp i can detect many wifi networks. but on backtrack i cannot see even one network. what the problem . Can please tell me a solution .i am a big fan of your work . please help me out.

[AtheismandSkepticism]

Loving the videos man, I've only just discovered these and I've been watching them all day (way to spend a day off work, lol). But seriously this is the best hacking series on Youtube.

I am quite experience at this, but nothing compared to you guise, and I've learn a lot more new stuff.

I would love to see some more if you got the time.

-AS.

[rick1475]

Daamn Great Vid Cant wait till im in this stage :D