Web Security Academy | SQLi | 10 - Listing Database Contents Oracle
We solve Portswigger's Web Security Academy lab named 'Listing Database Contents Oracle'. In order to solve the lab, we must find the name of the users table, then find the names of the username and password columns. Armed with the names we can query for the username and passwords of all users. We extract the administrator password and are able to login as the administrator to solve the lab.