OK, so now we know our target database is called up, then let's try and discover the tables that exist
in that database.
So this is our select statement.
It's a union select one and we have these things.
So I'm going to leave this or change this to now because I don't I only want to select one thing now,
and I'm going to say this to null as well.
And number two, we're going to select.
Table name.
From.
Now, we're going to select this from a database called Information Schema.
Now, I said this in the first video of ask you all that information schema is the default database
created by MySQL, and it contains information about all other databases.
So what we're doing now, we're selecting the table name from information.
Schema dot, and after the dot, you put the table.
So basically, we're selecting a table called tables from a database called Information Schema, and
the column that we're selecting is called table name.
So we're selecting table names from the database that's called information schema from the table tables.
Let's execute this and see if we can get all the tables that exist in our database.
So we can see we got two hundred and thirty seven records and you can see all the tables that we have,
so these are all the tables.
That we have access to.
So, again, I said we are logged in Nazareth, therefore we can actually see tables from other Web
applications, such as the Wiki.
But in real life scenarios, you'll only see tables related to your current database, which is mattilda.
So I'm going to do is I'm going to use a waiver clause and I'm going to say where the table.
Schema is equal to.
I was 10, so I was 10 was what we got when we executed, when we selected the database, so we got
our top 10, which is our current database that Mattilda is working on.
So we were using the same statement.
We're selecting the table name from information schema tables where the tables kema.
Is our top 10.
So I'm going to copy that.
And executer here.
And as you can see now, we have so many so much less tables and we only have the ones that we're interested
in, so we have the accounts, the blogs capture the data, credit cards hit log and the as tools.
Now, if you remember in the first or the second video in the Ezekial injection videos, we I showed
you what the content of the ASP table was, and it was these tables of the database.