I'm a student in computer security, and I'm trying to perfom a SQLi on the following request:
SELECT * FROM Books WHERE 1 AND (LOWER(title) LIKE '%aaa%' OR LOWER(blurb) LIKE '%aaa%' OR LOWER(content) LIKE '%aaa%') AND (publish_date IS NULL OR publish_date <= '2016-08-22') ORDER BY date DESC LIMIT -5,5
aaa is where the injection happen. I tried
') UNION SELECT * FROM Books# but, the server just send me back this injection as a "search result", so it does not work.
In order to better match the request, I would do
%'; REQUEST THAT I WANT; '%.
Or even better:
%'; REQUEST THAT I WANT;SELECT * FROM Books WHERE LOWER(title) LIKE '%.
But for thoose two last, I get a "Bad Request" response.