Head to the SQL Injection section in the DVWA
Check for the database with a ‘
Enter User ID as 1 to see how the database work.
Send the request to burpsuite.
Clear the payload and add the id= input.
I use the SQL payload list from here
Observe the payload with the different payload length.
Try out the successful payloads.
Persecure : my learning archive 