The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Extracting Useful Data

In order to extract useful data from the database, you normally need to know

the names of the tables and columns containing the data you wish to access.

The main enterprise DBMS’s contain a rich amount of database metadata that

you can query to discover the names of every table and column within the

database. The methodology for extracting useful data is the same in each case;

however, the details differ on different database platforms. We will examine

examples of extracting useful data from Oracle and MS-SQL databases.