twseptian · twseptian · commit 524c9a9da8bb · 2022-05-16T18:33:15.000+07:00
change sqli lab 09 description
diff --git a/port_swigger_academy/sqli/sqli_lab_09/README.md b/port_swigger_academy/sqli/sqli_lab_09/README.md
@@ -47,10 +47,10 @@ To solve the lab, log in as the  `administrator`  user.
 1.  Use Burp Suite to intercept and modify the request that sets the product category filter.
 2.  Determine the  [number of columns that are being returned by the query](https://portswigger.net/web-security/sql-injection/union-attacks/lab-determine-number-of-columns)  and  [which columns contain text data](https://portswigger.net/web-security/sql-injection/union-attacks/lab-find-column-containing-text). Verify that the query is returning two columns, both of which contain text, using a payload like the following in the  `category`  parameter:
     
-    `' ORDER BY 2--`
-	`' ORDER BY 2--`
-	`' UNION SELECT 'test', 'test'--`
-	`' UNION SELECT version(), NULL--`
+    - `' ORDER BY 2--`
+    - `' ORDER BY 2--`
+	- `' UNION SELECT 'test', 'test'--`
+	- `' UNION SELECT version(), NULL--`
 	
 	from the version, we know the database version is using PostgreSQL
 3.  Use the following payload to retrieve the list of tables in the database:
