OK so now we know our target database is called us.
Let's try and discover the tables that exist in that database.
So this is our select statement.
It's a union select one and we have these things.
So I'm going to leave this or change this to no because I only want to select one thing.
And I'm going to say this too as well.
And number two we're going to select table name
from now we're going to select this from a database called Information Kema.
Now I said this in the first video of rescue owl that information schema is the default database created
by my su l and it contains information about all other databases.
So what we're doing now we're selecting the table name from information
schema that.
And after that you put the table.
So basically we're selecting a table called tables from a database called Information schema and the
column that we're selecting is called Table name.
So we're selecting table name from the database that's called Information schema from the table tables.
Let's execute this and see if we can get all the tables that exist and was then database
so we can see we got 237 records.
And you can see all the tables that we have.
So these are all the tables that we have access to.
So again I said we are logged in as root therefore we can actually see tables from other web applications
such as the tickey weiqi.
But in real life scenarios you'll only see tables related to your current database which is Matilda.
So I'm going to do is I'm going to use a WHERE clause and I'm gonna say where the table
schema is equal to our US 10 so us 10 was what we got when we executed when we selected the database.
So we got ours then which is our current database that Matilda is working on.
So we're using the same statements we're selecting the table name from information schema tables where
the table schema is owe us 10 so I'm going to copy that and execute it here.
And as you can see now we have so many so much less tables and we only have the ones that we're interested
in and so we have the accounts the blogs capture data credit cards log and the painters tools.
Now if you remember in the first or second video and the scale injection videos we showed you what's
the content of the WASP table was and was these tables of the Aiwass database.