Getting started with Manual MySQL Injection

The most basic and common MySQL commands used while learning manual SQL injection.

A quick reference of the most common MySQL queries used while learning manual SQL injection in a lab. Only ever run these against systems you own or are explicitly authorised to test.

1. Common information

SELECT @@version;
SELECT user();
SELECT database();

2. Database names

SELECT schema_name FROM information_schema.schemata;

3. Table names

SELECT table_name FROM information_schema.tables;

4. Column names

SELECT column_name FROM information_schema.columns;

5. Timing

SELECT SLEEP(5);

The original post also listed a few payload strings for file read/write and string-encoding tricks. Those working payloads are intentionally left out of this migrated copy — paste them back from your web.archive.org copy if you want the full original.

Originally published at https://snazzysanoj.in/getting-started-with-manual-mysql-injection/