(MySQL) Adding ORDER BY clauses to (ASC/DESC)

Injection ORDER BY -direction

In the last module, we learned how to use error-based techniques when the injection point is in the column parameter of the ORDER BY clause (ORDER by email, etc).

Now you can practice the same technique when injection is in the direction parameter of the ORDER BY statement (e.g. ORDER BY email ASC).

ORDER BY -parameters can also be added after the direction, for example, this is a valid SQL statement:

For this reason, the attack is practically identical to the one practiced in the previous module, so take this module as a review. If you get stuck, refer to the instructions from the previous module.