TryHackMe SQL Injection Lab

Solving the is a fundamental step for any aspiring penetration tester. This lab covers everything from basic database theory to advanced exploitation techniques like In-Band , Blind , and Out-of-Band SQL Injection (SQLi).

• Explanation: The payload ' AND (SELECT COUNT(*) FROM table_name) > 0 -- - induces an error that reveals the table name.

• Task: Find the table name.
• Steps:
  1. What database are we using? MySQL
  2. What is the version of the database? 8.0.21
  3. What is the name of the table that contains user credentials? users
  4. What is the username and password of the user with ID 1? root:password