1  %title SQL Injections
 2  :hack:
 3  %date 
 4  %update 2023-06-04 00:13
 5  %link https://github.com/payloadbox/sql-injection-payload-list
 6  
 7  = SQL Injections =
 8  
 9  Types: 
10  * In-Band SQL Injection - Usually used to exfiltrate data that isn't supposed to be accessible
11  * Error Based SQLi - Uses errors to understand how to exploit the db (Which tables exist, how many columns, etc) 
12  * Blind SQLi - The data is not returned with the input query, so we can't exfiltrate 
13  * Union-based SQLi - Using SQL union to gather data from other tables in a single query
14  
15  
16  -----
17  = Backlinks =
18  
19  - [[hacker101|hacker101]]