Just discover a SQL injection point, but fail to know the column names? Stumble against the Access database or MySQL 4.0 database? Do not worry, here I am gonna share a method to dump the database even without knowing column names.
Continue reading “Injection Without Knowing the Column Names”